I always wonder how do they manage many different passwords in an organisation.
I work in a company of 20 and find it very difficult to protect applications using passwords. Employee A comes in for a job. I give him the password for the sales email ID. Suddenly he leaves the job after a week. Then I change the password of the email again. Employee B joins in. He gets the newly assigned password. And so on.
This is just for email. The most crucial part comes where many different third party services are involved and each service having a password. Right now, I am the only one in the company to have all those passwords and I don't even dare to share them with others. That includes the web server logins, web host logins, ISP logins, VOIP logins and many more. What will happen in case if I am dead tomorrow? Definitely the services are going to be interrupted and it may take a while for all the paperworks to be done by the management to get back the accesses. In worst scenarios like the in-house web servers, it's even very difficult to get back the acccess without my presence.
What would be the right way to manage accounts? How they do it in big organisations? This has always been a question with no right answer, at least for me.