Identity security was analyzed in a report by Silverfort finding the identity attack surface as the most significant gap in cybersecurity resilience.
https://www.securitymagazine.com/articles/99866-94-of-organizations-dont-have-full-visibility-into-service-accounts