Rapid IAM access review with risk-rated findings

Access sprawl is where audits fail and breaches start. In five days I give you an evidence-based, risk-rated picture of who has access to what, why, and whether they should — written so your engineers and your board can both act on it.
I have led identity and access programmes in regulated environments for 15+ years across SailPoint IGA, Active Directory and Entra ID, with a PhD in Information Systems & Security and CSM/SAFe delivery credentials. This is not a scanner dump. It is a delivery leader’s read on your access risk, with every finding risk-rated and assigned to an owner, so you get a plan rather than homework.
One thing up front: I work entirely from read-only exports and interviews. I don’t need — and won’t ask for — admin credentials to your systems. If your access data can’t be exported, tell me before you buy, and I’ll say honestly whether this will work.


What I’ll need from you
● Which systems or applications are in scope, and what is driving this (audit, incident, joiner backlog)
● Entitlement, role or group-membership exports for those systems (CSV/XLSX)
● Your primary platform: SailPoint · Entra ID / Azure AD · Active Directory · other

What’s included
● Access review across up to 3 in-scope systems or applications
● Entitlement and role analysis — who holds what, and whether it is justified
● Joiner-mover-leaver process spot-check
● Privileged and orphaned account check
● Risk-rated findings report (PDF) with owner-assigned actions
● 30-minute walkthrough call