David Spark

Scenario number one, for years, you've been running a security program held together by a few very exhausted security heroes.

You know it will collapse if two people leave, all right?

Your security department is gone if two people go.

That's scenario number one.

Second scenario, for years, you've had unmanaged service accounts

API tokens and non-human identities that no one fully owns.

Eh, kind of partially.

But in both cases here, the two scenarios, you're stunned that nothing has exploded because they're both powder kegs, just ready to explode.

Mike, which one is worse?

Which is like, yeah, you got all of this and none of that, or all of that and none of this.

But they're not going to get solved.

That's the thing.

It stays like this.

Well, but the thing is, first scenario, your security program is running reasonably well, it sounds like.

Second scenario, it's kind of crappy to start with.

Has happened or something is very visibly weak.

Well, no, no, it isn't just two.

There's a bunch, but if two go.

So I think first scenario is the worst.

First is the worst.