Identity & Access Governance deals with the control of all aspects of data access in a company. The objectives are data security and the reduction / elimination of operational risk. This is particularly challenging in a highly regulated environment where there are a large number of entitlements on applications and infrastructure components. Whilst the application environment and process-related structures are constantly changing and the regulatory burden increases, we must also ensure that operation stability is maintained. With this in mind, what are the the main actions which now have to be set up in order to both master this challenge and maintain economic efficiency?