File share audit: which settings put the data at risk?

Red flag. Unencrypted storage: anyone with access to the device or drive can read every file, including the passport scans.

Red flag. Weak access control: every user can view and even edit customer records, so one compromised account can steal or destroy them.

Fine. Public brochures are meant to be read by all staff. Read-only access to non-sensitive files is fine.

Red flag. All staff have administrative privileges. If an adversary compromises any user account, they get elevated privileges on the system.

Fine. Only the managers group can open contracts. Access is limited to the role that needs it.

Fine. Regular backups help restore files if they are destroyed or encrypted. Not a vulnerability.

Red flag. The booking application runs with administrative privileges. An adversary who exploits it can control system settings and reach any file.