Expectations versus reality

Consider the following real-world scenario: HR IT does not want to provide read-only production access to their system. Instead, they will provide access to their development environment that has production data without private details such as salary and home address. A Management Agent is configured to connect to the development system, and all is working well until it is discovered that a high-ranking executive had access to the business' confidential files for a week. HR confirm that the employee was properly terminated, so the identity management system is blamed for the security breakdown. Analysis discovers that the HR development system is only updated once a week. Different departments voice how they thought the system worked. The building facilities and IT security thought that termination updates disabled accounts immediately even though HR performs terminations at the end of the day. Organizational expectations need to be addressed, which will impact...