Users & Workflows
The first step is understanding how people actually work: employees, guests, vendors, remote users, and shared devices. This reveals access gaps, workflow friction, and places where permissions or device use may create operational risk.