Sampling privileged access without drowning in exports

Privileged access reviews fail in two opposite ways: drowning the team in every account ever created, or sampling so lightly that dormant admin rights remain invisible.

Choose a window you can defend

A six-month window often balances freshness with HR data quality. Shorter windows miss leavers who still linger; longer windows bury the review in noise.

Match to HR, not to memory

Export terminations and transfers for the same window. Match on employee ID where possible; name-only matching creates false comfort. Document every unmatched privileged ID — including vendor accounts.

Treat emergency IDs as first-class

Break-glass accounts deserve their own procedure check: who knows the password, where it is stored, and whether use is logged. In several Miyagi engagements we found emergency IDs still set to passwords shared during a go-live weekend.

Write findings operators can close

“Reduce privileged accounts” is not actionable. “Revoke shared plant-supervisor ID on Inventory App and replace with named roles by 30 September” is.

If you need a focused review rather than a full control audit, our privileged access review is built for this depth.