What is a potential risk of creating too many identity profiles?

• A. Enhanced data security
• B. Identity duplication and provisioning errors
• C. Increased accountability
• D. Faster onboarding processes

Answer: (B)

Creating too many identity profiles can lead to identity duplication and provisioning errors, which is a significant risk in identity management. When multiple profiles are established for the same individual, it can cause confusion and inconsistencies in access rights and privileges. This duplication can result in erroneous access permissions, where the same individual might have different levels of access across various profiles, potentially undermining security protocols.

Provisioning errors may occur when the identity management system struggles to accurately associate the correct access rights with each profile. This can happen during attempts to deprovision or update access for an individual, leading to either over-provisioning or under-provisioning, where users have more access than necessary or are inadvertently denied access to essential resources.

Additionally, managing a proliferation of identity profiles increases complexity within the system, making it more challenging to maintain and audit user access, ultimately creating vulnerabilities that could be exploited. Thus, the presence of too many identity profiles makes identity governance less efficient and can compromise the overall security posture of an organization.