Topic starter
25/06/2026 12:11 am
TL;DR: Fragmented identity visibility can leave stale access and policy drift in place between reviews, according to Omada Identity. Continuous remediation helps teams act on correlated evidence before excess access accumulates across hybrid estates.
Editorial analysis by NHI Mgmt Group, based on content published by Omada Identity: “From Visibility to Action: How Access Intelligence Keeps Identity Risk Under Control”.
Key questions
Q: Why does fragmented identity data weaken customer experience and governance?
A: Fragmented data forces teams to act on partial context, which causes poor recognition, inconsistent service, and missed commercial opportunities.
Q: What are the signs that identity governance is not working in practice?
A: Common warning signs are repeated access workarounds, ignored approval workflows, super admins holding too much power, and teams bypassing the process because it is too slow or hard to use.
A: Security teams should centralise visibility across the identity plane, map where access exists, and enforce policy from a consistent control layer rather than relying on disconnected point checks.
Practitioner guidance
- Unify identity sources into one governed view Correlate directories, HR data, SaaS platforms, cloud inventories, and entitlement records so ownership and access can be assessed in one place.
- Prioritise remediation by access context Use usage patterns, role overlap, and privilege history to decide which dormant accounts and excess entitlements should be fixed first.
- Automate low-risk revocations through governed workflows Route routine removals and access adjustments through approved workflows that preserve evidence, while escalating higher-risk cases for review.
Bottom line: Identity governance is moving from snapshot-based review to continuous remediation because access estates now change faster than certification cycles.
Glossary terms: Access intelligence, Identity Drift, Governed Remediation, Identity Blast Radius
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
25/06/2026 9:02 am
Access intelligence is becoming the missing control layer in modern IGA. Traditional governance programmes still assume that visibility, review, and remediation can happen as separate steps. That assumption breaks when identity estates span hybrid infrastructure, SaaS, HR, and cloud systems that change continuously. The practical conclusion is that identity governance now has to operate as a live control loop, not a periodic compliance exercise.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
- The average time to mitigate a leaked secret is 36 hours, highlighting the operational burden of manual remediation processes, according to the 2024 State of Secrets Management Survey.
A question worth separating out:
Q: When should organisations move from periodic certification to continuous remediation?
A: They should make that shift when access changes faster than review cycles can absorb, especially in hybrid estates with frequent provisioning, migrations, or mergers. Continuous remediation is justified when the main risk is stale access, not isolated approval errors.
👉 Read our full editorial: Access intelligence is reshaping identity governance and remediation