Over the years people at my company have shared resources on cloud platforms with 3rd many parties. This can be files on Google Drive, articles on Confluence, repositories on Github, slack channels, really anything on a cloud platform that allows for collaboration. 3rd parties include ex-employees, clients and ex-clients, partners and suppliers. Over time this is becoming a significant security risk with data such as documents containing trade secrets or personal data shared with external entities, who no longer have a legitimate need for this data. Some of these documents are still being updated from time to time by people in the company who are unaware who else has access rights! Is this a common situation? How do companies usually manage cloud resources? Is it all down to how diligent (or not so dilignet) the account admins are?
Take Google Drive as an example. The platform allow you to share files with people outside of an organization. As clients, suppliers and employees come and go we've accumulated a large amount of files on these platforms that are shared with people who don't really need to access them any more. The process of going through all our files, and determining who needs access and who doesn't is very painful, and needs to be done on a regular basis. Is there a better way? How do other companies manage this?