Procurement built a GDPR request tracker, ironically unsecured

“There are only like twelve users.”— Finance Business Partner

Reason:

Honestly? Because the official procurement tool takes 9 clicks to add a supplier. Forked from a tutorial at 16:32 and never cleaned up.

Built by:

Marco, a field technician

Build time:

an afternoon, mostly

Built with:

Python and a cron job on a laptop

Database:

a MySQL database called final on a machine under a desk

Authentication:

SSO, but only for Daniel

Deployment:

last deployed 141 days ago

Responsible:

Nadia, who inherited it from Marco by accident

Documentation:

one README with 2 TODOs

Security situation:

IT was informed. IT has chosen peace.

Future disaster:

It will turn out to be the only system that knows the real numbers.

Age: 9.1 years · originally expected to last 3 weeks · 5 owners so far · survived 1 reorganisation · last meaningful change 74 days ago · original builder left 1537 days ago

Rated common mostly because: alive 159x longer than intended, the builder has left, older than the department using it.