Identity-based cyber risk is still driving serious incidents. This signal explains why trusted access, routine workflows and compromised approvals remain major business weak points.