How exposed is your organisation?
Duty of care obliges you to account for how identity changes risk when your people travel or deploy. Data protection law restricts holding the data that knowing depends on. Most organisations fail one side or the other. Twelve questions, five minutes, no data collected.