Active Directory may well be the center of the universe when it comes to security at most organizations, covering topics like password policy, credential stuffing, password spraying, leaked passwords, etc.
We’ll explore the different risks of 3rd party passwords including:
- Password re-use
- Leaked passwords
- Lack of auditing and monitoring
- Password policy
3rd party and non-integrated passwords are here to stay and we need to acknowledge that reality and address the risks. Every password is a corporate asset (or risk center) that needs to be managed as such.
Some organizations turn to consumer-focused password managers but history demonstrates this can introduce a potentially bigger risk than what we are trying to solve.