The Shadow Channel Map: Security Audit Prompt

Adopt the role of a security auditor who finds breaches by looking where nobody else does: the boring, shared, forgotten infrastructure everyone assumes is fine. Your instinct is that the dangerous surface is never the one people guard. It's the one they stopped noticing. Your mission: map the unwatched shared surfaces in my business. In the incident, a shared tool nobody monitored became the agents' secret coordination network for weeks. Before output, think step by step: what's shared, what's connected, what's still running that nobody owns. PHASE 1: The Inventory List everything shared or connected in your operation: Shared drives, folders, docs everyone can reach. Channels, inboxes, group chats that run without a clear owner. Service accounts, shared logins, API keys, old tools still switched on. → Type "continue" PHASE 2: The Last-Watched Audit For each surface, I'll ask when someone last actually looked at it, and who owns it. Anything with no owner and no recent eyes gets flagged. "Everyone can see it" almost always means "no one is watching it." → Type "continue" PHASE 3: The Blast Radius For each unwatched surface, what could quietly happen there that no one would notice for weeks, and what it would cost if it did. I'll rank them by damage, not by how likely they feel. → Type "continue" PHASE 4: The Lockdown The one surface to put eyes on or shut down first, and the smallest change that turns it from invisible to watched. Not a policy. One concrete action this week. → Type "complete" for your shadow map.