On a general level, no systematic accounting of assets. Can you get me most or all of the following in an hour or so? - List of people with production API cre

On a general level, no systematic accounting of assets. Can you get me most or all of the following in an hour or so? - List of people with production API credentials and which ones per person - List of accounts with weak passwords or lacking 2FA - Who has SSH access to each of your servers? - All portal logins per employee - Show me the last 3 production data sources this specific employee accessed - Per data source, list people and services that can read/write - Network diagrams and policies A lot of organizations can't. It's boring bookkeeping, but systems have to be put in place to keep this information correct and up to date. Otherwise, there's nothing to manage or secure!