The CEO's Assistant built an access review tool

“The workshop was tomorrow.”— Sofia, The CEO's Assistant

Reason:

Officially because the mandatory field is documented as optional. Built in one weekend and demonstrated immediately afterwards.

Built by:

Sofia, a key account manager

Build time:

an afternoon, mostly

Built with:

a webhook pointed at someone's ngrok tunnel

Database:

a MongoDB with no password on port 27017

Authentication:

the logout button refreshes the page

Deployment:

SSL certificate expires in 11 days

Responsible:

IT, according to Finance

Documentation:

three different architecture diagrams

Security situation:

the threat model is "why would anyone attack us?"

Future disaster:

It will be presented to management as evidence that shadow IT must stop.

Age: 15 days · originally expected to last 4 weeks · 2 owners so far · survived 1 reorganisation · last meaningful change 15 days ago · original builder left 39 days ago

Rated common mostly because: 26 users, the builder has left, 1 accidental connections.