Operational risk covers aspects such as processes being vulnerable to theft, fraud, disruption or mismanagement. Better management of the way in which employees, partners and customers are identified and their access is controlled and audited can mitigate some of these operational risks.

The key business drivers that make identity management important are financial discipline, operational risk and compliance with legal and regulatory requirements.

(Small, 2004, p. 7)