Which of these is not a good practice for controlling computer access?

Which of these is not a good practice for controlling computer access?

• A. Using a unique password for each user
• B. Logging into systems with a shared user-ID or password
• C. Regularly updating passwords
• D. Implementing two-factor authentication

Answer: (B)

Using a shared user-ID or password compromises the security and integrity of computer access controls. Each user should have their own unique credentials to ensure accountability and traceability. When multiple individuals use the same credentials, it becomes difficult to determine who accessed the system at a given time, which can lead to potential misuse or unauthorized access. Unique user identifiers enhance security practices by allowing monitoring of individual user activities and ensuring that all actions can be attributed to the correct individual. Moreover, utilizing unique passwords supports compliance with security best practices, fosters personal responsibility, and allows for tailored access levels depending on the role of the user. In contrast, shared credentials can lead to password fatigue, where users might choose weaker passwords, thus increasing the risk of security breaches. Maintaining strong access control measures is crucial for protecting sensitive information, particularly under regulations like HIPAA, which mandate stringent protections for health-related data.

Using a shared user-ID or password compromises the security and integrity of computer access controls. Each user should have their own unique credentials to ensure accountability and traceability. When multiple individuals use the same credentials, it becomes difficult to determine who accessed the system at a given time, which can lead to potential misuse or unauthorized access. Unique user identifiers enhance security practices by allowing monitoring of individual user activities and ensuring that all actions can be attributed to the correct individual.

Moreover, utilizing unique passwords supports compliance with security best practices, fosters personal responsibility, and allows for tailored access levels depending on the role of the user. In contrast, shared credentials can lead to password fatigue, where users might choose weaker passwords, thus increasing the risk of security breaches. Maintaining strong access control measures is crucial for protecting sensitive information, particularly under regulations like HIPAA, which mandate stringent protections for health-related data.