Risk Management built a vendor contract tracker

“Everyone using it is trustworthy.”— Head of Operations

Reason:

Allegedly because the workaround has its own workaround. With a logo generated at 16:50.

Built by:

Thomas, an analyst

Build time:

1 hours 46 minutes

Built with:

Vue, for personal reasons

Database:

passwords stored in a column called password

Authentication:

the role is a query parameter

Deployment:

running in a region 7 time zones away from its users

Responsible:

a project group that technically no longer exists

Documentation:

a Notion page titled "New docs"

Security situation:

the service account is also a real employee

Future disaster:

It will create a GDPR incident somebody describes as "probably minor".

Age: 15 days · originally expected to last 7 days · 2 owners so far · last meaningful change 15 days ago

Rated common mostly because: 18 users, 9% chance of becoming business critical, alive 2x longer than intended.