TAP TAP GO
Make the decision
A profile can represent an individual while depending on company-managed content and contact routes. Agree who owns the account, who maintains the information and what happens when the person leaves. These are separate questions. Do not assume a personal email account is the right recovery route for a company asset, or that an employer should control every part of someone’s personal professional identity. Document the arrangement before granting access.
Put it into practice
Keep an account register with the service name, responsible owner, approved administrators and recovery arrangements. Store credentials through an appropriate secure process rather than in the register itself. Review the register when responsibilities change. Test whether another authorised person can perform essential updates without borrowing a colleague’s login. A good ownership plan also covers asset permissions, so a departing employee knows which company brochures, logos and contact routes must be removed or reassigned.
Hypothetical example
A sales team distinguishes employee-owned personal profiles from company-owned campaign pages. Two authorised staff can maintain the campaign pages, and the recovery route belongs to the business. When a campaign manager leaves, the handover does not depend on access to their private mailbox.
Make it practical.
Use this checklist as you read. Checks are not stored.References & further reading
Further reading: CISA: Secure Our World ↗Published by Tap Tap Go. Product availability and eligibility vary by programme and market. About our stories.
