Identity is Key to Bolstering CI Controls