The firewall was set up. Scanners were running. Everything looked fine. Until a routine network penetration test found an old staging server no one remembered. It was still connected, still exposed, ...