<story><title>Engineer admits he wiped 456 Cisco WebEx VMs from AWS after leaving</title><url>https://www.theregister.com/2020/08/26/former_cisco_engineer_aws_webex_teams/</url></story><parent_chain></parent_chain><comment><author>kstrauser</author><text>I left one job to switch to another. A year later, my new job started using a cloud-based task management app. When I went to sign in, my 1Password auto-filled the credentials I&amp;#x27;d used for the same app at my previous job, and there I was looking at all of my old employer&amp;#x27;s current projects and other confidential info. I called my old boss (who I got along with just fine), told him what happened, and asked him to please cut off my access immediately.&lt;p&gt;When you leave a job, it&amp;#x27;s in your own best interest to make sure that all of your access is removed. It&amp;#x27;s a lot harder for them to blame unexpected happenings on you if you can&amp;#x27;t even log into the thing. (Not that this happened here. I just wanted to point out a gotcha you might not have thought about.)&lt;p&gt;If you find out that they missed something, report it to them immediately &lt;i&gt;and keep that paper trail&lt;/i&gt; demonstrating your good intentions toward them. Then hound them about it until they get around to fixing the situation. And for the love of God, &lt;i&gt;don&amp;#x27;t ever, EVER&lt;/i&gt; log in &amp;quot;just to look around&amp;quot;. Absolutely no good can come of that.</text></comment>
<story><title>Engineer admits he wiped 456 Cisco WebEx VMs from AWS after leaving</title><url>https://www.theregister.com/2020/08/26/former_cisco_engineer_aws_webex_teams/</url></story><parent_chain></parent_chain><comment><author>nixgeek</author><text>Biggest question for me would be why the employee still had access so long after terminating employment with Cisco.&lt;p&gt;A common piece of auditor evidence across many compliance frameworks is whether employees have access proportionate to their role (which is naturally highly subjective), but also proving that access is revoked when employees leave the company. This seems like an outright failure on Cisco’s part.&lt;p&gt;Hopefully they’ve learned from this and put effort into enhancing their identity governance situation.</text></comment>