Identity governance and administration (IGA), also called identity security, is a set of policies that allow firms to mitigate cyber risk and comply with government regulations to protect sensitive data. These policies help prevent breaches by ensuring that the right employees access data only as needed.