By limiting user access, effective Identity Governance reduces the risk of data breaches and insider threats. Yet how can organizations protect themselves when an attacker still makes it past their defenses? Realtime monitoring of IT events allows organizations to detect threats and stop them before they can escalate. In this talk, Helmut Semmelmayer explains what makes threat detection an essential piece of Identity Governance, taking it from passive risk reduction to proactive defense.