Financial organizations must effectively manage a broad array of potentially damaging events caused or made possible by inadequate governance of user access to an enterprise’s information assets. Such events range from policy and compliance violations of various regulations and measures, such as Sarbanes-Oxley Act (SOX) Act, Gramm-Leach-Bliley Act, Basel II/Solvency II capital-adequacy requirements and various privacy regulations, to disastrous business losses. Financial organizations face significant challenges in managing user access across a multitude of disparate systems and data assets.”]
Source: https://www.bankinfosecurity.com/whitepapers/managing-risk-for-effective-access-governance-w-151