Gist: The post argues that identity audits miss a critical risk window: the delay between HR status changes and actual access removal. It emphasizes measuring time-to-revoke, not just whether access controls and workflows exist.
Signal reason: Frames the message around a broader identity-security narrative and audit limitations.
