Modernizing identity security in regulated industries