If you joined next month and found messy SaaS sprawl with weak access controls, how would you get it under control in 60 days?

Situational