Identity & Endpoint

Identity & Access

Workforce and reporting-organisation identities · phishing-resistant MFA, adaptive access, just-in-time privilege and identity threat detection

Campaigns

Campaign	Scope	Reviewers	Items	Progress	Due	Status
Q4 2026 privileged access	Privileged accounts	Both	214	78%	2026-11-08	Active
Client Portal RO administrators	Client Portal · RO administrators	Application owner	1,104	41%	2026-11-15	Active
HSM operators	HSM operators	Both	12	100%	2026-10-20	Completed

AI pre-review findings

31 dormant accounts

Revoke

No sign-in for 90 days. Recommend revoke.

auto-filled in the campaign

4 toxic combinations

Review

The same person can create and approve an RO penalty. Split the roles.

segregation-of-duties rules

18 peer outliers

Review

Access far beyond peers in the same team.

peer-group analysis