Failing to manage shared passwords properly can expose organisations to serious vulnerabilities – for example, where a disgruntled employee has access to a privileged account which could potentially hold a network hostage.

Keeping track of privileged user and shared access accounts is also important for accountability. Unfortunately, many organisations don’t know exactly who has access to shared passwords: often, the entire IT department knows the details of what should be a limited-access password.