4 ms·
“Do they have access” is one thing, but what happens when they use the access? Is there any logging or proactive monitoring? A single support account reading s
by draw_down 5y ago
“Do they have access” is one thing, but what happens when they use the access? Is there any logging or proactive monitoring?
A single support account reading say 10x the normal number of accounts per day, with a different geographic distribution than the norm, should ring alarm bells. It’s not enough to say “well shucks they have access to the data, guess we’ll do nothing”
- cupofpython 5y agoI agree with you, put support agents in the panopticon. You could go as far as to give them access to each others logs and enable a bounty system for reporting (verified) abuse anonymously.
- draw_down 5y ago
- Melatonic 5y agoI agree - this should be super important especially for a company like Okta