Shared Administrator Accounts Approved Amid Finance’s Budget Cut

Decisions 3 today

The business responds

• When the fly wanted more information on “Budget cut imposed by Finance: Finance has unilaterally cut the security line item”, Finance dug in its heels. They cooled on the fly a little.

  “A demand for more information after Finance cut the line is not a ruling, it is a receipt with no total.”

  Finance Pushed back trust -2

  Next, they want: “By 3 p.m., send one costed option with minimum containment cost, deferred-risk cost, funding source, accountable owner, and decision deadline.” They have already asked for a slot in the fly's diary.

• OT / Grid Operations heard that the fly approved “Removal of shared administrator accounts” and reached straight for a counter-offer. They warmed to the fly, very slightly.

  “Approved in principle. Now give us the named reviewers, dated deadline, rollback plan, and confirmation that Grid Operations approves every production change.”

  OT / Grid Operations Negotiated trust +2

  Next, they want: “Send the written disclosure review plan today, with missing information, reviewers, decision deadline, and the no-production-change requirement.” They have already asked for a slot in the fly's diary.

• IT / Infrastructure heard that the fly approved “Removal of shared administrator accounts” and reached straight for a counter-offer. They warmed to the fly, very slightly.

  “Fine, we will remove the shared administrator accounts, provided you approve named replacements, recovery testing, and a short exception process before anyone discovers production has preferences.”

  IT / Infrastructure Negotiated trust +2

  Next, they want: “Authorize a 30-minute transition review covering named-account provisioning, recovery access, service dependencies, and time-limited exceptions.” Expect an email.

Diary

• IT / Infrastructure: “Authorize immediate staff warning and mailbox containment, with a 30-minute review limited to operational impact, dependencies, and disclosure phasing.” Meeting · dropped

  Back on day 30, IT / Infrastructure asked for a meeting with the fly about “Authorize immediate staff warning and mailbox containment, with a 30-minute review limited to operational impact, dependencies, and disclosure phasing”. It was postponed once, and today it quietly vanished from the calendar. Nobody has asked where it went.

• International Communications: “Approve the remediation update, spokesperson, and next briefing time within two hours.” One-to-one · dropped

  Back on day 31, International Communications asked for a one-to-one with the fly about “Approve the remediation update, spokesperson, and next briefing time within two hours”. It was postponed once, and today it quietly vanished from the calendar. Nobody has asked where it went.

• IT / Infrastructure: “Authorize a 30-minute review covering operational impact, user burden, dependencies, recovery testing, and exceptions.” Meeting · dropped

  Back on day 32, IT / Infrastructure asked for a meeting with the fly about “Authorize a 30-minute review covering operational impact, user burden, dependencies, recovery testing, and exceptions”. It was postponed once, and today it quietly vanished from the calendar. Nobody has asked where it went.

• Executive Board: “Submit the costed 24/7 model, interim coverage, named response owner, residual risk, counsel’s view, and board decision time within the hour.” One-to-one · postponed

  Back on day 33, Executive Board asked for a one-to-one with the fly about “Submit the costed 24/7 model, interim coverage, named response owner, residual risk, counsel’s view, and board decision time within the hour”. It was due today, and got pushed back over a diary clash nobody will explain.

• Legal / Compliance: “Provide the missing-item list, owners, revised deadline, and review trigger in a written decision record by end of day.” Meeting · dropped

  Back on day 33, Legal / Compliance asked for a meeting with the fly about “Provide the missing-item list, owners, revised deadline, and review trigger in a written decision record by end of day”. It was postponed once, and today it quietly vanished from the calendar. Nobody has asked where it went.

• OT/SCADA zero-day disclosure: incident war-room War room · postponed

  Only yesterday, OT / Grid Operations, IT / Infrastructure and Legal / Compliance asked for an incident war-room. It was due today, and got pushed back over a diary clash nobody will explain.

What each department thinks of the fly