Start Here
These checks surface blind spots in 2–5 minutes. No tools. Just honest answers.
Check #1: Departed Access
Pull a list of people who left in the last 12 months.
Pick one.
Check if their access still works.
Pick one.
Check if their access still works.
Works = process failure
Can't check = visibility failure
Can't check = visibility failure
Check #2: Retired Systems
Name one system you retired in the last 6 months.
Check: Network route • Login access • Billing line
Check: Network route • Login access • Billing line
If any answer is "Yes" (or no one can prove "No")
it's a Zombie.
it's a Zombie.
Check #3: Ownership Test
Pick your most critical production asset.
Ask the listed owner:
"Can you approve taking this offline for 10 minutes right now?"
Ask the listed owner:
"Can you approve taking this offline for 10 minutes right now?"
If approval isn't immediate,
the asset is unowned.
the asset is unowned.
Check #4: Test/Dev Cleanup
Search for assets labeled:
test / temp / dev / sandbox
Filter for Publicly Facing.
Pick one.
test / temp / dev / sandbox
Filter for Publicly Facing.
Pick one.
Delete it, or set an expiration date.
Check #5: Asset Drift
Count production assets today.
Find the count from 3 months ago.
If you can't explain the growth
Find the count from 3 months ago.
If you can't explain the growth
you have Asset Drift.
If even one of these checks felt uncomfortable, the framework shows how to surface and fix this systematically.