The practice
About
An independent Idaho practice advising mid-market leadership teams.
Mark Lencioni
Founder & Principal Advisor
Mark spent his early career designing identity and access systems for organizations that could not afford to get them wrong — the kind of environment where a bad access decision shows up as an incident, not a support ticket. That work is the foundation for how he now advises clients on AI: treat identity as the control plane first, and let the tooling decisions follow from it.
He founded Lencioni & Associates to bring that discipline to mid-market organizations that are adopting AI across a hybrid estate — a cloud productivity suite alongside systems that are not moving — without the dedicated security org that would normally do this work in-house.
How we think
Three principles behind every engagement.
Identity is the control plane
Access policy, segmentation and monitoring all follow from identity, not from network location or a static role. That holds whether the request comes from a person or from an AI system acting on one's behalf.
Start with governance, not tools
A tool selected before the acceptable-use, data-classification and approval questions are answered just moves the risk downstream. Governance decisions come first; the tooling decision gets easier once they're made.
Hybrid by design
Cloud and on-premises are not a migration in progress — for most mid-market organizations, they're the permanent shape of the environment. Architecture and access policy are designed to span both from the outset, not patched together after the fact.
Where we work
Based in Idaho, working nationally.
Lencioni & Associates is based in Idaho and works with mid-market organizations wherever they are. Engagements run remotely by default, with time on-site for discovery and design work when the environment calls for it.