Topic starter
24/06/2026 11:58 pm
TL;DR: Shared credentials, weak passwords, missing MFA, and disconnected social media accounts leave organizations exposed to account takeover, fraud, compliance failure, and prolonged lockout, according to Cerby. The problem is not just operational hygiene but an access governance gap that IAM and IGA programmes were never built to cover.
Editorial analysis by NHI Mgmt Group, based on content published by Cerby: “Securing Social Media: The Business Risks of Social Media Account Compromises”.
Key questions
Q: What breaks when social media accounts stay outside IAM and IGA control?
A: Lifecycle management, credential governance, MFA enforcement, and auditability all become fragmented when social platforms cannot participate in standard identity workflows.
Q: Why do shared social media credentials create so much risk?
A: Shared credentials remove individual accountability, make least privilege hard to enforce, and complicate investigations because activity cannot be reliably tied to one person.
Q: What are the signs that social media account security controls are failing?
A: Warning signs include unexpected posts, account tampering, unauthorized third-party app activity, and content published from unusual sources.
Practitioner guidance
- Inventory every business social account Build a complete register of platforms, brands, regions, and campaign accounts, including who owns each account and how access is recovered if the original creator leaves.
- Eliminate shared logins where the platform supports delegation Move from shared passwords to per-user access, delegated publishing, or role-based controls so actions can be traced to named individuals.
- Enforce MFA and passkeys on all social accounts Require stronger authentication on every account that supports it, and remove any credential path that still depends on reusable passwords alone.
Bottom line: Social media accounts create a governance gap when they sit outside IAM and IGA yet still control high-value business channels.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 8:46 am
Social media accounts expose a governance gap because they are business systems without enterprise identity control: the identity model assumes corporate applications can be provisioned, reviewed, and offboarded through central IAM and IGA workflows. Social platforms often sit outside that model, so marketing access becomes a parallel identity estate with weaker ownership, weaker traceability, and weaker recovery.
A question worth separating out:
Q: How should organisations govern shared social media accounts without losing speed?
A: Use named owners, role-based delegation where available, and a defined offboarding and recertification process for every platform. The goal is to preserve campaign agility while removing anonymous access, uncontrolled credential sharing, and recovery dependency on a single person.
👉 Read our full editorial: Social media account takeover exposes the IAM gap in marketing access