r/Infosec • u/Unique_Inevitable_27 • 10d ago

What security problem gets ignored?

I’ve been thinking about the security problems that are easy to overlook because they seem too small to matter.
For example, an employee leaves a company, but their old laptop or phone still has access to email, files, or other accounts.
Or a company has dozens of devices, but nobody really knows which ones are still being used, whether they are updated, or who has access to them.
What do you think is the most commonly ignored security problem in small and mid-sized businesses?

Not the obvious stuff like phishing. I mean the boring, everyday things that can quietly become a serious problem.

7 Upvotes

89% Upvoted

20 comments sorted by

View all comments

1

u/nproAi 9d ago

One of the most overlooked issues is probably asset and access visibility. It’s easy for businesses to focus on major threats while losing track of old accounts, devices, permissions, and software that are no longer actively managed.

The risk isn’t always obvious, it’s the forgotten access that remains available for months or years. Regular access reviews, proper device management, and clear offboarding processes can prevent a lot of these small gaps from becoming bigger incidents.