Digital asset access, day 6: who can do what? Part 1
The short answer
When someone leaves or changes roles, their digital access should change too, just like their keys. Review who has access to each asset and how much. Look for old accounts, duplicates and anyone with more access than they need, especially admin rights.
Hello! If you are new to the series on Small Business Security, make sure to check out Day 1. If you are all caught up, welcome back.
Today we are going to go through each of the digital assets you outlined previously to assess the accounts/users in each and their Digital Asset Access. When an employee moves on to another opportunity you would certainly ask for them to return any physical keys you have granted them. Similarly, when a person changes roles or leaves your company it is important to disable or remove the access that they no longer need. Most companies don’t keep up with this very well and as a result end up with accounts of former employees, or accounts that have too much access.
For today please look through each asset and review who has Digital Asset Access and how much. Keep an eye out for old accounts, duplicate accounts or people with too much access. Be very careful with who has administrative access to your critical assets. Happy hunting!
Be sure to come back for Day Seven / Part Two / Who Can Do What
