Password Loss and Recovery

The loss of a service-access password shouldn't affect a business--assuming it's not the administrator password--but a key data-resource password could cripple operations. IT needs to take the lead in teaching managers and users to escrow the passwords necessary to operate the business. It's equally important to develop a culture of using different passwords for escrowing--no one should need to know an employee's access password.

Keep the escrowing process safe and simple--something your colleagues trust and want to use. Remember, complexity is the hacker's playground. A real--not virtual--firebox in each manager's office may be all you need.

Post a comment or question on this story.