Use unique credentials
Avoid reusing the same password across business systems. A reputable password manager can help teams create and store unique credentials without relying on spreadsheets or shared notes.
Protect important accounts
Enable multi-factor authentication where supported, especially for email, cloud services, administrator accounts and other systems that can expose business data.
Review access regularly
Access should match a person’s current role. Review user accounts when responsibilities change and promptly remove accounts that are no longer needed.
When to request IT support
If an account is locked, compromised, repeatedly challenged by security controls or unexpectedly changed, document what happened and request IT support rather than repeatedly guessing credentials.

