Over the past decade, technology transformation has been significant, particularly in the realm of Identity. What was once straightforward identity and access management, focused on application access governance, has now evolved into complex layers that influence how customers interact with an organization's products. For instance, identity now plays a crucial role in enhancing user experience and driving more foot traffic to stores or contributing to more around digital trust. While these transformations have highlighted the importance of Identity Governance and Administration (IGA) capabilities, they have also impacted and reshaped the enterprise risk landscape. Unfortunately, this area still lags behind, as many organizations fail to incorporate these considerations into their large-scale identity programs and thus IGA transformation programs and GRC as functions still run in silos.