How much of your jobs are trusting without verifying?

I’m curious how often others in this industry take what they are told at face value without actually seeing the evidence of it being correct.

Depending on how your organization functions folks in security may or may not be hands on with all to none of the actual infrastructure/software.

Do you all actively try to gain access to all systems (may actively go against principles of least privilege), have people walk you through it, or accept what they are telling …

cybersecurity evidence functions hands on industry infrastructure jobs may organization security software value