Overly Permissive Cloud Service Configuration

When an organization temporarily relaxes permissions to accelerate development and never revokes them; due to unmitigated control gaps, an audit finds the training data storage accessible from outside the organization, with no way to confirm whether it was previously downloaded, triggering compliance exposure and operational reputational costs.