Skip to content
Secure

Small Business Security in 5 Minutes - Day 6 - Who can do what?: Part 1

The short answer

If you are all caught up, welcome back. Today we are going to do through each of the digital assets you outlined previously to assess the accounts/users in each. When an employee move on to another opportunity you would certainly ask for them to return any physical keys you have granted them.

Two user icons and a third crossed out in red

Hello! If you are new to the series make sure to check out Day 1. If you are all caught up, welcome back.

Today we are going to do through each of the digital assets you outlined previously to assess the accounts/users in each. When an employee move on to another opportunity you would certainly ask for them to return any physical keys you have granted them. Similarly, when a person changes roles or leaves your company it is important to disable or remove the access that the no longer need. Most companies don't keep up with this very well and as a result end up with accounts of former employees, or accounts that have too much access.

For today please look through each asset and review who has access and how much. Keep an eye out for old accounts, duplicate accounts or people with too much access. Be very careful with who has administrative access to your critical assets. Happy hunting!

Where we can help

Related offering · Secure

Cybersecurity Benchmark & 12-Month Roadmap

"Where do we really stand, and what should we fix first with the budget we have?"

Free tool · about 2 minutes

Take the blind spot check

Four questions for a quick read, then go deeper on your weakest area.

More in Secure

All Secure posts · All Insights

Talk to a Principal Engineer

Got a question one of these posts didn't answer? Ask the engineer who would do the work.