As identity becomes the new perimeter, a critical risk is still under-acknowledged: losing access to your own cloud tenants. This session examines how ransomware, “scorched earth” attacks, and admin mistakes can trigger cloud lockout, and contrasts fear of lock‑out vs. fear of lock‑in. We’ll outline common lockout patterns, practical recovery options (support and technical), and why retaining on‑prem AD as a controlled sync source can be a powerful safety net. Attendees will leave with a concise readiness checklist and a perspective on where new controls and industry patterns are urgently needed.