Topic starter
24/06/2026 11:58 pm
TL;DR: Social media accounts outside IAM and IGA create a governance gap that makes takeover, lockout, and misuse more likely, according to Cerby. Lifecycle control for every platform needs named ownership, delegated access, and consistent offboarding to reduce dependence on informal handling.
Editorial analysis by NHI Mgmt Group, based on content published by Cerby: “Securing Social Media: The Business Risks of Social Media Account Compromises”.
Key questions
Q: Why do shared social media credentials create so much risk?
A: Shared credentials remove individual accountability, make least privilege hard to enforce, and complicate investigations because activity cannot be reliably tied to one person.
Q: What are the signs that social media account security controls are failing?
A: Warning signs include unexpected posts, account tampering, unauthorized third-party app activity, and content published from unusual sources.
Q: What breaks when social media accounts stay outside IAM and IGA control?
A: Lifecycle management, credential governance, MFA enforcement, and auditability all become fragmented when social platforms cannot participate in standard identity workflows.
Practitioner guidance
- Inventory every business social account Build a complete register of platforms, brands, regions, and campaign accounts, including who owns each account and how access is recovered if the original creator leaves.
- Eliminate shared logins where the platform supports delegation Move from shared passwords to per-user access, delegated publishing, or role-based controls so actions can be traced to named individuals.
- Enforce MFA and passkeys on all social accounts Require stronger authentication on every account that supports it, and remove any credential path that still depends on reusable passwords alone.
Bottom line: Social media accounts create a governance gap when they sit outside IAM and IGA yet still control high-value business channels.
Glossary terms: Account Takeover, Disconnected Social Account, Shared Credential Risk, Access Attribution
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
25/06/2026 8:46 am
Social media accounts expose a governance gap because they are business systems without enterprise identity control: the identity model assumes corporate applications can be provisioned, reviewed, and offboarded through central IAM and IGA workflows. Social platforms often sit outside that model, so marketing access becomes a parallel identity estate with weaker ownership, weaker traceability, and weaker recovery.
A question worth separating out:
Q: How should organisations govern shared social media accounts without losing speed?
A: Use named owners, role-based delegation where available, and a defined offboarding and recertification process for every platform. The goal is to preserve campaign agility while removing anonymous access, uncontrolled credential sharing, and recovery dependency on a single person.
👉 Read our full editorial: Social media account takeover exposes the IAM gap in marketing access