“It is cyber-security 101 not to share passwords. Only one person should know and use a password”
Last week’s Inbox contained a letter from someone offering several solutions to the scenario presented in a recent Double Take, in which a key staff player’s offline vacation left the company without critically needed access. As someone who has worked in computer security, I found the solutions offered to be impractical and even dangerous.
It’s true the suggestions would solve the immediate access problem presented in the Double Take column. However, the potential cost, including legal liability for negligence and not performing due diligence, could be staggering.
It is cyber-security 101 not to share passwords. Only one person should know and use a password.
Two-factor authentication (2FA) is only viable if the code is sent to a device under the control of the individual making the request.
Create a free account to keep reading.
