Managing Security Risks in AD & IAM Environment