Access reviews

Access Reviews Are Broken: Why Rubber Stamping Happens (and What Agentic UARs Change)

Access reviews are designed to enforce least privilege principles, yet at enterprise scale they frequently devolve into rubber stamping-where reviewers approve nearly all requests. This occurs not due to negligence, but because the process is structurally optimized for speed over quality decisions.

The Last Manual Audit: Agentic AI and the Future of Compliance

Roughly 70% of large companies conduct annual cybersecurity audits, and they’re widely despised. Compliance teams spend months gathering evidence, working extended hours, and managing operational slowdowns. The process involves auditors requesting documentation with tight deadlines and follow-up dem

23,000 third-party contractors, 13 brands, seven people on the identity team. Twine runs the weekly recertification in Teams, with a manager in control.