Security starts with knowing who can do what.
The NIS2 directive has expanded the focus on risk management and incident handling in essential sectors. Even beyond its direct scope, it encourages every company to review shared accounts, overly broad permissions, and access rights that persist after departures.
A simple registry is better than a blind spot.
A list of tools, administrators, account owners, and removal procedures already reduces many risks. This foundation can then support a more comprehensive policy.
To learn more. European rules related to NIS2