Your engineer is working from a café in Prague. Their credentials are valid. Their device is enrolled in MDM. But something about the login is unusual — new location, new IP address, accessing your production database at 11pm local time. In a traditional network...