Two former incident responders received multi-year federal sentences after using BlackCat ransomware against U.S. companies they had access to through their day jobs.
Separation of duties, privileged access reviews, and behavioral monitoring on your own security team are not optional controls.
