How weak operational habits create security risks

Ad-hoc access grants accumulate. Without periodic review, former vendors retain keys and dashboards stay world-readable.

Document who can approve elevated access and how long it lasts. Temporary access should expire automatically.