Tackling High Risk User Access Compliance