Who can see and query sensitive security data isn't tightly governed, so over-broad access to the SIEM and data lake becomes its own risk. The security platform can leak what it's meant to protect.
"Who can actually see and query our most sensitive security data, and should they?"
Over-broad data access
Live RBAC view
To first outcomes