Identity discovery: The overlooked lever in strategic risk reduction

**Executive summary:** The report warns that modern identity security suffers from a visibility gap as non-human identities (service accounts, cloud roles, API keys, AI agents, etc.) proliferate across hybrid environments; it recommends continuous, cross-environment identity discovery, posture assessment, and identity graphing to map access relationships, prioritize remediation, and enable board-level risk measurement—arguing that discovery must precede effective least-privilege, automation, and governance.