Nobody knew what the server did
This is a scream test, and it works, which is the problem. It is what you are left with when nothing was written down and the one person who knew has since left. Needing it is the finding, not the method.
How to pass a security audit →
More from the court
