Most organisations think access is under control. It isn’t. Accounts stay active long after people leave…
Lee F. — IAM & GRC Consultant | Identity Governance, Access Control & Security Design
Most organisations think access is under control.
It isn’t.
Accounts stay active long after people leave.
Access is added but rarely removed.
Credentials get shared just to keep things moving.
Over time, no one actually knows who has access to what.
Not the business.
Not the MSP.
Not even IT.
Everything looks fine until something goes wrong.
And when it does, the first question is always the same:
Who had access to this?
That is when the gap becomes visible.
This is not a tooling issue.
It is a lack of ownership, structure, and governance around identity and access.
3 reactions · 0 comments