You know that feeling when you’re explaining to leadership why the identity program you’ve spent years (and maybe millions of dollars) building still can’t prevent the latest threat technique involving compromised credentials? Yeah, that one. The “we did everything right, but…” conversation that makes you question whether we’re fundamentally approaching this wrong?