Identity & Access Risk Intelligence

TerraVault Insurance Group • Real-time identity risk operationalization connecting auth anomalies, privilege sprawl, and access certification gaps

Last updated: 3 minutes ago
Period: Last 90 days
Goal: -25% IBEI in 60 days
Privileged Sprawl Index
3.7
+0.3 vs target
Orphaned Accounts
127
-18 last 7d
MFA Enrollment Gap
8.2%
Contractors: 12.4%
MFA Bypass Rate
1.3%
-0.4% MoM
Cert Completion Rate
82%
Avg lag: 23d
Dormant Priv Accounts
41
No change

Privilege Sprawl by System & Role

Privileged account distribution across Tier-1 systems • Size = account count • Color intensity = avg access age

IBEI Composite Score Breakdown

Waterfall showing contribution of each risk factor to total index

Anomalous Authentication Events

Daily rate • Day 11 spike: credential stuffing attack on contractors

MFA Enrollment by Segment

Contractors lag at 87.6% enrolled

JML Process Failures

Leaver process gap creates orphaned accounts

Access Cert Lag Distribution

Days overdue by system tier

Highest-Risk Identity Events

Top 12 identity risks requiring immediate action • Sorted by composite risk score

User / Account Type Risk Issue System Days Open Risk Score Status
svc_payroll_batch Service Acct Credential age 847d, no rotation policy SAP Financials 847 94 Critical
james.morrison@ext Contractor Terminated 34d ago, 3 systems still active Okta, Salesforce, Jira 34 91 Critical
admin_db_legacy Admin Dormant 127d, Domain Admin privileges Active Directory 127 89 Critical
maria.santos@ext Contractor No MFA, 14 failed auth attempts day 11 Okta 79 87 High
svc_bi_extract Service Acct Access cert overdue 67d, READ on PII tables Snowflake DWH 67 84 High
raj.patel Employee Privileged access, MFA bypass 8x last 30d CyberArk PAM 30 82 High
temp_dataload_03 Temp Admin Created for migration, project ended 45d ago Oracle ERP 45 78 Medium
linda.chen Employee Role change 21d ago, old Finance access retained Workday, NetSuite 21 76 Medium
svc_claims_api Service Acct Password stored in GitLab repo, detected day 6 Claims Platform API 84 74 Medium
alex.kim@ext Contractor AWS Console access, no MFA, 2 regions AWS IAM 56 72 Medium
backup_admin_02 Admin Shared credential, last rotation 312d ago Veeam Backup 312 69 Medium
emily.rodriguez Employee 14 privilege escalations last quarter (helpdesk) ServiceNow, AD 90 64 Low

Service Account Credential Age

Distribution across 218 service accounts • Target: <180d rotation

Zero-Trust Coverage by Asset Tier

% of identities under continuous verification policy

MFA Bypass / Fallback Authentication Trend

30-day daily tracking • Bypass events vs. total authentications • SMS fallback highlighted

Orphaned Account Count by System

Accounts belonging to terminated users still active • Tier-1 systems flagged