Prassi aziendale is the informal routine a company actually follows in daily work, even when it differs from written policies or procedures. It includes the shortcuts, exceptions, and habits that become the real way tasks are approved, shared, stored, or escalated.
In cybersecurity, this matters because attackers and defenders both operate against the real process, not the ideal one. If staff regularly bypass approval steps, reuse exceptions, or share data through unofficial channels, controls such as access management, logging, and traceability can fail silently. Security teams should therefore inspect living workflows, not only policy documents, to spot weak points, reduce shadow practices, and make controls match actual behavior.