________ is perhaps the main external factor driving IAM efforts. Response:

Regulatory compliance mandates, such as GDPR, HIPAA, or PCI DSS, impose strict requirements on how organizations manage user identities and control access to sensitive data, making them a primary external driver for IAM initiatives.

Business need is an internal driver, not an external factor, though often influenced by external pressures.

The evolving threat landscape is an environmental factor, but regulations often formalize the required security controls in response to these threats.

Monetary value is a consequence or a metric, not a direct external force driving IAM efforts.