How did a new checkbox in a cloud-based CRM solution result in large-scale data disclosure incidents globally? Why did we end up taking over an Active Directory domain for a bank whose networks had been assessed every year before? What can we do to avoid issues like these?

 

In this talk, we explore practical cases from our consulting projects where “blind spots” in IT security have led to large-scale effects, and discuss what could be done to ensure that critical systems and applications – whether first-party or third-party – do not slip out of the scope of security operations.