Many organizations are performing detailed substantive audits of their critical applications and supporting infrastructure. It's not that they don't know how to do this, it's that the detail in which they are performed is not sufficient. Service accounts and generic accounts when reviewed, the reviewer doesn't know the purpose or who has access to the accounts. This happens at all three layers. In addition to this, the access programs that govern privileged access don't outline proper procedures, reporting guidance, or oversight responsibility. These two factors combined can create security gaps and exposure to the organization, even when it feels like everything is in place and operating.

Learning Objectives: