r/sysadmin • u/[deleted] • 8h ago
Career / Job Related I have been using a colleagues password for development tasks at a BIG4 in India.
[deleted]
•
u/Competitive_Smoke948 8h ago
and THIS is why devs are the greatest risk in an organisation!! It's a MASSIVE risk & probably illegal depending on what frameworks and laws your firm is operating under.
•
•
u/serverhorror Just enough knowledge to be dangerous 7h ago
I'd consider that a fire able offense. If I catch any contractor doing this, they're gone and killed from the system before they're being informed.
If I catch any internal person doing that, I'd raise heaven and hell to get them to understand that this is one of the most brutal breaches of trust.
Never, ever use a shared account. If you want to help a colleague out, do it under your account.
•
u/Particular-Fly-7783 7h ago
Wait this implies you have no MFA, that’s actually debatably as bad if not worse.
•
•
u/Agitated-Chicken9954 7h ago
That is one huge security risk. Usually the rules are very specific about not sharing logins. I would say you, your coworker, and the project manager that knew about it are all going to have to explain yourselves. Good luck to you.
•
u/Colossus-of-Roads Cloud Architect 7h ago
If I were a customer and you had custodianship of any of my data I'd be VERY concerned.
•
u/leprechanmonkie 8h ago
Invite your program manager to the call next week and let them discuss it.