Named accounts and shared credentials

A shared login has three costs. It cannot be revoked for one person without disrupting everyone. It destroys attribution, so no log answers who made the change. And it spreads: shared credentials end up in chat messages, spreadsheets and personal notes, and every copy outlives the reason it was made.

Where a platform genuinely offers only one login — some payment gateways, some government portals, some older tools — the credential belongs in a password manager's shared vault with per-person access that can be withdrawn, and it is rotated when anyone with access leaves. That is a mitigation, not a solution, and the number of such systems should be a known, short and shrinking list.

The company account on someone's personal profile

Business pages on the major social platforms are administered through individual personal profiles. If the business page is owned by one employee's personal account, the company's presence leaves with them — through a resignation, a dispute or the loss of their personal account. Ownership belongs to a business account with at least two administrators on separate credentials, set up before it matters.

A definition sits still. This does not.

The term is a reading taken at a point in a sequence that is already running. These are the sequences, with the place each of them jams.

From an enquiry arriving to somebody answering it

A message from a person who might buy, travelling from the form they filled to somebody who can actually answer what they asked. 6 steps, one inbox per channel, and a person per inbox is the arrangement that fails while looking reasonable.

---

From a brief to work somebody has accepted

A piece of paid work, travelling from the sentence that started it to the moment the buyer agrees it is finished and can carry it without the supplier. 6 steps, acceptance by demonstration is the arrangement that fails while looking reasonable.

Somebody is accountable for this number.

A definition is free. Being answerable for the figure it produces is the part that is bought, and this term is a working part of the engagements below.

Anti-crisis engineering and recovery

Stabilise before you improve. A system under stress cannot absorb a redesign.

---

IT consulting for companies in Dubai and across the Emirates

A company owns what it can recover without asking anyone's permission. The rest is rented.

---

Custom software development and AI engineering for Dubai

A probabilistic component is only safe inside a deterministic boundary.

Offboarding

The sequence that removes a departing person's access to everything, in an order that does not lock the company out of its own systems on the way.

---

Least privilege

Giving each person the narrowest access that lets them do their job, so that a compromised or departing account costs the least it can.

---

Digital asset register

A written list of every account, domain and system the business depends on, recording who owns it, who administers it, what it costs and how it is recovered.

---

Password managers and passkeys

Two mechanisms that remove the human from the part of authentication humans are worst at — remembering secrets, and judging which site to give them to.

All ninety-six termsWhat this is regulated by in the UAE

Is this one right in your own numbers?

The definitions are the easy part. Whether the figure on your dashboard was computed this way is a different question, and usually the more expensive one.