One of the most impactful things I've done with enterprise security, and I mean moreso than buying any expensive product, was deployed a browser policy that dis

One of the most impactful things I've done with enterprise security, and I mean moreso than buying any expensive product, was deployed a browser policy that disabled browser notifications (and deployed ublock). Service desk calls from people claiming to have been hacked because their browsers kept popping up scare ware ads dropped to nothing overnight, with a notable drop in complaints and absolutely zero complaints logged about people who wanted notifications on something. It's obscene, the desktop notification feature has generated more work for security people than active directory and it's lack of mfa support.