Industry data shows it's not unusual for an IT environment to have 30 to 60 per cent of all identities being orphan identities.