Every M&A deal models IT integration. The financial model includes a line item for it. The deal team knows systems need to merge. That part is not ignored.

What is ignored is the accountability layer underneath the technology: who owns the access, how do you maintain governance during the transition, and what happens to the cost when two identity platforms run in parallel longer than planned.

📊 The Accountability Gap

The deal team models IT integration as a cost with a timeline. The integration team discovers that the timeline is not determined by the technology. The directories are compatible. The platforms can be connected. The applications can be migrated.

The timeline is determined by the governance: consolidating two access review cycles, two audit trails, two compliance frameworks, and two sets of ownership accountability into one. The technology can be connected quickly. The governance consolidation is what actually takes time, because it requires decisions about ownership, access scope, and accountability that no vendor can make for you.

Most deal teams model the technology integration. Few model the governance decisions that determine how long it actually takes and what it actually costs.

🔐 Identity Is the Accountability Layer

Merging two companies is a technology project, but it is not just a technology project. The identity layer is where accountability lives: who has access to what, who owns that access, and who is responsible when something goes wrong.

Consider what identity governance actually requires during integration:

Access ownership. Two organizations mean two sets of access owners. During integration, ownership is ambiguous. The old organization’s access owners are no longer responsible. The new organization’s access owners don’t yet exist. In that gap, access persists without accountability. Nobody owns it. Nobody reviews it. Nobody can answer the auditor’s question.

Governance continuity. The merged entity must demonstrate governance to regulators while the integration is in progress. Two access review cycles must run in parallel. Two audit trails must be maintained. The auditors do not pause for your merger. The governance burden doubles while the integration team is already at capacity.

Service account accountability. Hundreds of non-human identities. Each one with its own credentials, its own permissions, its own purpose. Most of them undocumented. During integration, nobody owns them. The old team owned them. The new team doesn’t know they exist. They persist, ungoverned, accumulating permissions across two environments.

Access continuity. The business cannot stop during integration. Users need access to both environments. Service accounts need to reach both directories. The identity layer must function across two partially merged environments for months, sometimes years, while the consolidation progresses. Every access decision during that period is a governance decision, not a technology decision.

This is not a project plan. It is an accountability gap. And most deal teams do not model it.

💰 The Permanent Cost

The visible cost of M&A IT integration is the technology migration. The actual cost is the governance decisions that determine how long the migration takes and what it costs to sustain.

Two identity platforms running in parallel until governance is consolidated. Duplicate access review cycles running simultaneously. Two sets of audit evidence being maintained. Two sets of ownership accountability being tracked. Every one of these duplicated processes has a labor cost, and that cost persists until someone makes the governance decisions to consolidate them.

The synergy number assumed the integration would be a technology project with a defined timeline. The actual timeline is determined by governance decisions, not technology migration. And governance decisions take longer than technology migration because they require organizational alignment, not just technical configuration.

✅ The Recommendation

The path forward is not faster migration. It is earlier accountability planning.

Model identity governance cost in the deal memo alongside the technology integration cost. Do not treat access ownership as a post-close detail. Treat it as a pre-close risk factor. The accountability layer determines whether the integration sustains itself or collapses under duplicated governance overhead.

The organizations that integrate well are the ones that assign access ownership during due diligence, not after the deal closes. The question is not whether the systems can merge. The question is who owns the access once they do.