Ensuring the correct access to the right people. The identity-centric approach to corporate security