Named accounts and shared credentials

A shared login has three costs. It cannot be revoked for one person without disrupting everyone. It destroys attribution, so no log answers who made the change. And it spreads: shared credentials end up in chat messages, spreadsheets and personal notes, and every copy outlives the reason it was made.

Where a platform genuinely offers only one login — some payment gateways, some government portals, some older tools — the credential belongs in a password manager's shared vault with per-person access that can be withdrawn, and it is rotated when anyone with access leaves. That is a mitigation, not a solution, and the number of such systems should be a known, short and shrinking list.

The company account on someone's personal profile

Business pages on the major social platforms are administered through individual personal profiles. If the business page is owned by one employee's personal account, the company's presence leaves with them — through a resignation, a dispute or the loss of their personal account. Ownership belongs to a business account with at least two administrators on separate credentials, set up before it matters.

Offboarding

The sequence that removes a departing person's access to everything, in an order that does not lock the company out of its own systems on the way.

---

Least privilege

Giving each person the narrowest access that lets them do their job, so that a compromised or departing account costs the least it can.

---

Digital asset register

A written list of every account, domain and system the business depends on, recording who owns it, who administers it, what it costs and how it is recovered.

---

Password managers and passkeys

Two mechanisms that remove the human from the part of authentication humans are worst at — remembering secrets, and judging which site to give them to.

All forty-five termsWhat this is regulated by in the UAE

Is this one right in your own numbers?

The definitions are the easy part. Whether the figure on your dashboard was computed this way is a different question, and usually the more expensive one.