Cutting down your privileged accounts from 120 to just 30 can slash your mean...

https://www.pop-bookmarks.win/cutting-privileged-accounts-from-120-to-under-15-slashed-our-blast-radius-we

Cutting down your privileged accounts from 120 to just 30 can slash your mean time to detect from 35 days to under 3. I did this with Okta’s governance features—and avoided a $145,000 compliance penalty in the process