I recently gave a talk at TROOPERS on the topic of the implicit trust relationships in an organization's IT infrastructure. The recording of this talk has just been posted to YouTube and is embedded below:

My goal was to explain to the audience how many layers there are in even small networks, and how weaknesses in one layer can allow attackers to pivot to another. From this, high-level guidance was suggested via the framework of "InfoSec Debt".