The Access Review

Part of the Security Fundamentals section of Coddy's Cybersecurity journey. Lesson 19 of 43.

Challenge

Medium

Ticket from Sam, IT lead

An import restored our shared reception login, gave two support workers access they do not need, and let someone both change supplier details and approve payments. Find and fix those four mistakes before customer orders are copied out. The shared login is already being tried from outside.

The rota and jobs have not changed: I manage IT, Dana manages supplier details, Omar approves payments, and support staff need customer orders. Keep the former employee's account disabled and leave the existing MFA protection on.

Try it yourself

Terminal

The Access Review

All lessons in Security Fundamentals