Internal Audit built a bonus calculator

“We have a backup somewhere.”— Plant Manager

Reason:

Mainly because the admin account belongs to somebody who left 15 months ago. Presented in a town hall as "innovation".

Built by:

Elena, a controller

Build time:

2 evenings

Built with:

whatever the AI picked first

Database:

an audit table that nobody has ever queried

Authentication:

the admin route is called /secret

Deployment:

deployed with a shell script called deploy-final.sh

Responsible:

Anja, because everyone else refused

Documentation:

a Miro board with 97 sticky notes

Security situation:

the API key is shared by 9 applications

Future disaster:

It will turn out to contain the only correct customer addresses.

Age: 15 days · originally expected to last 2 months · 2 owners so far · survived 1 reorganisation · last meaningful change 15 days ago

Rated common mostly because: 50 users, 1 accidental connections, 3% chance of becoming business critical.