Challenge #1: Standing Access Increases Risk of Abuse and Breach
Most users—especially admins, developers, and vendors—are given persistent access to sensitive systems they only use occasionally. This creates unnecessary exposure and violates least privilege principles.