Being the global orchestrator of your IT infrastructure, Active Directory is, by design, a single point of failure. On the other hand, Active Directory forests are perpetually evolving, in tandem with the enterprises’ organigrams, business architectures, and M&A activities. Thus Active Directory is also, by construction, a heterogeneous system whose security hygiene gets quite ugly quite quickly. That being said, what are the actual, corporate-level risks that result from this weak link’s central position?