Every IT Team Has a Joe | Ep 195

Interested in a pen test? Visit securit360.com.Every organization has a Joe. He is the long tenured engineer or admin who built half the environment, maintains the other half, and keeps most of it in his head. Everybody depends on him and nobody wants to challenge him.Spencer and Tyler break down key man risk in IT, drawing on hundreds of internal pen tests across law firms, banks, credit unions, manufacturing, municipalities, and SaaS organizations.In this episode:Why tribal knowledge is a security risk, not just an operations problemHow word of mouth process handoffs turn into a game of telephoneThe reason remediations stall for an extra 30 daysShadow IT that originates inside the IT teamPrivilege creep and the single account that owns the environmentWhen Joe's resistance to change is the correct callCross training that does not add more work to Joe's plateIncentives, clear ownership, and update deadlines that actually stickSeparating fact gathering from decision making so seniority does not win by defaultThis is not a knock on senior admins. It is a look at the risk that accumulates when one person carries everything, and what IT leaders can do about it.All of our content can be found at Offsec.blog. Interested in a pen test? Visit securit360.com.Blog: https://offsec.blog/Youtube: https://www.youtube.com/@cyberthreatpovTwitter: https://x.com/cyberthreatpovFollow Spencer on social ⬇Spencer's Links: https://spenceralessi.comWork with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.