Misconfiguration

A misconfiguration is an incorrect or incomplete configuration of a system, which can lead to undesired behaviors or outcomes. When protecting data, common misconfigurations include failure to enable MFA, failure to encrypt sensitive data, or failure to enable audit logging to track access to protected information.