Identity & Access Risk Posture

Meridian Capital Partners • Jan–Dec 2023

Breach Probability Score
64/100
+8 pts vs Q3
Privilege Sprawl Index
8.4%
-2.8 pts from peak
MFA Gap (Critical Apps)
12%
+3% vs target
Stale Privileged Accounts
47
-17 this quarter
JML SLA Compliance
94%
+6% YoY
Orphaned Accounts
67
-67 since Apr spike

Privilege Sprawl Index & MFA Coverage Trend

Monthly view showing correlation between privilege sprawl reduction and MFA coverage improvement

MFA Enrollment Gap by App Tier

Critical apps show 12% gap; High-tier at 8%

Authentication Anomaly Score Distribution

UEBA scores (0–100); 14% of accounts in high-risk deciles

High-Risk Orphaned & Stale Privileged Accounts

Top 10 accounts requiring immediate remediation • Last updated: Dec 31, 2023

Account Type Directory Privileged Last Auth Days Inactive Risk
svc-vantage-backup Service Vantage Labs AD Domain Admin 2023-04-12 264 Critical
admin-jmiller User Azure AD Global Admin 2023-07-19 165 Critical
contractor-apex-001 Contractor Azure AD DB Admin 2023-08-03 150 High
svc-legacy-etl Service On-Prem AD Schema Admin 2023-06-21 193 Critical
test-admin-vl Test Vantage Labs AD Enterprise Admin 2023-04-08 268 Critical
adm-portfolio-sync Service Azure AD Privileged Auth Admin 2023-09-14 108 High
migration-admin-02 User On-Prem AD Exchange Admin 2023-05-30 215 High
svc-vantage-sql Service Vantage Labs AD DB Owner 2023-04-15 261 High

Credential Exposure Events (Dark Web)

Monthly exposed credentials found in breach corpus

Lateral Movement Risk by Segment

Network segments ranked by privilege density

Access Recertification Campaign Completion

8 campaigns run in 2023 • Campaign 6 (Oct) shows 82% completion with 127 overdue entitlements