Immediate Takeaways
- Build the business case around operating cost and risk reduction, not just software replacement.
- Measure the cost of manual access reviews, ticket-based provisioning, custom connectors, and audit preparation.
- Fund migration by retiring duplicate IAM tools and reducing control-testing effort.
- Track value through deployment speed, review cycle time, orphaned access reduction, and audit evidence reuse.
Action Plan
- Create a baseline: licenses, hosting, contractors, upgrade projects, manual review hours, and audit support.
- Prioritise high-cost workflows: access certification, JML, privileged access reviews, and SoD.
- Run a 90-day SaaS pilot against two critical apps and one cloud estate.
- Move from annual audit scramble to continuous evidence capture.
Control Checklist
- TCO model with one-time, recurring, people, infrastructure, and audit categories.
- Application onboarding plan ranked by risk and manual effort.
- Retirement plan for duplicate connectors, scripts, and spreadsheets.
- Executive dashboard: cost avoided, controls automated, review hours reduced, and exceptions closed.
- Migration guardrails for data quality, role cleanup, and access recertification before cutover.
Useful References
Download the full PDF
The downloadable PDF for “The Total Cost of Legacy IGA: A CFO Guide to Modernisation” is not available yet. Check back soon or if you need a copy.