You're likely dealing with a stack that grew in pieces. Microsoft 365 for email and files. A separate endpoint tool. Maybe another filter for phishing. A VPN policy nobody loves. Audit logs that exist, but aren't easy to use when something goes wrong. On paper, it looks covered. In practice,