1. A method performed by a computer for auditing a distributed computing environment in which a plurality of entities has identity accounts which allow access to protected resources in the environment, comprising: by a processing unit in the computer, collecting data associated with an identity account in a plurality of identity accounts, wherein the data comprises at least one of compliance data, prior compliance violation data, or personal data about an entity associated with the identity account; determining a risk factor for the identity account based on the collected data; calculating a risk score of the identity account based on the determined risk factor; and auditing the identity account with a frequency according to the risk score assigned to the identity account.