We passed the tabletop exercise on backups for years. Offsite copies, tested restores, documented retention. The thing we never examined was how the backup system authenticated, and the answer was that its service account was a member of a group with administrative rights on effectively every s...
Source: [Dev.to](https://dev.to/serguey_shinder_4ab9b87b1/our-backup-system-had-the-keys-to-everything-it-backed-up-1a9l)