Thanks for sharing. DPOs surely want to read the letter to the EU Commission: linkedin.com/posts/max-schrems_letter-to-the-eu-commission-on-eu-us-data-activity…?…
Leading by example: management will announce to refrain from all exceptions immediately.
If it's in the cloud, enforce MFA 🛡️