Quality Assurance built a GDPR request tracker, ironically unsecured

“We'll add tests later.”— IT Service Desk

Reason:

Because the process owner is Anja, who has never used the ERP. With a logo generated at 11:12.

Built by:

Petra, a team lead

Build time:

a long Thursday

Built with:

a no-code builder on a personal account

Database:

a SharePoint list with 23,834 items

Authentication:

no login. It is on the intranet, so it is fine.

Deployment:

running on a server last patched 411 days ago

Responsible:

a consultancy that changed its name twice

Documentation:

a README describing a version that no longer exists

Security situation:

backups use the same password as production

Future disaster:

It will become business critical in 15 months.

Age: 1.9 years · originally expected to last 3 months · 1 owner so far · last meaningful change 210 days ago

Rated common mostly because: 64 users, alive 8x longer than intended, €526 per year.