Security drift: when policy no longer matches reality

Security drift appears when controls and systems diverge, weakening access policy, monitoring, backups and audit evidence, quietly and over…