Cutting down your privileged accounts from 120 to just 30 can slash your mean...

https://wiki-velo.win/index.php/Why_Do_Customers_Churn_After_a_Security_Incident_Even_If_You_Patch_Fast%3F

Cutting down your privileged accounts from 120 to just 30 can slash your mean time to detect from 35 days to under 3. I did this with Okta’s governance features—and avoided a $145,000 compliance penalty in the process