Marta, CISO of Caldwell Manufacturing, learns why two PAM projects died: ten failure modes, each the dark mirror of a module.
Marta, CISO of Caldwell Manufacturing, visits Abby Steel after her company's second PAM project collapses. Her board wants to know why Abby Steel finished when Caldwell didn't. As she tells her story, the team recognises ten failure modes, each a module of this course run in reverse, and the module becomes a revision of the whole curriculum.
Marta arrives with her board's question, and the industry pattern appears: deployments stuck at partial coverage, shelfware, and restarts that inherit old scars.
Caldwell fired the engineer and changed nothing, then bought a vault with no strategy, operating model or owner. The tool automated the chaos.
Project one protected only the 90 accounts Caldwell knew about. Project two tried 'everything, everywhere, at once' and lost its funding.
The platform was chosen by demo, discount and deadline, then launched big-bang with no pilot or rollback. It ended as shelfware.
Recordings nobody opened and alerts sent to an unstaffed mailbox. An attacker sat inside for seven months with the evidence in plain sight.
The programme ignored clouds, pipelines, machine identities and an AI pilot, and no one ever independently measured it.
Both breaches came through machine identities, vendor logins and break-glass accounts. Humans were vaulted, but everything else stayed in shadow.
Marta sees the difference: Abby Steel treated every step as a discipline, while Caldwell treated the whole thing as a purchase. Layla hands her the rules, and the course ends with a charge to the learner.