Businesses have not yet mastered the deployment of privileged access management.