This paper discusses the barriers to successful identity compliance and the importance of focusing identity risk management efforts on the information assets that represent the most value – and potential liability – to the business.