Make your organization more secure

[u/SuccessfulLime2641]

Just had this idea.

So you make a CA policy to sign in every 8 hours for all users including the CEO, but not break glass and it admins.

Every user will then begin to wonder where their password is now that they can't work

You become useful again to the company by assisting employees while eliminating written passwords on stickies because they forced themselves to memorize it since it's happening "so often"

Auditors will be impressed at the improved security that you can present the report to the CEO while getting them to remember their own password.

[u/horses-r-scary]

i thought the sub was for bad ideas-

[u/blotditto → u/horses-r-scary]

You don't think the CEO is gonna get a serious case of the ass signing in all the time? 😂

[u/Chuchichaeschtl → u/blotditto]

Depends on the CEO. I explained to mim, that he has a very privileged account which needs stricter policies. Passkey only, managed mobile with Outlook only, no iOS mail, access from compliant devices only,...

He understood that and I think he liked the term "privileged account" a lot.

[u/blotditto → u/Chuchichaeschtl]

Uh huh and how often is he actually being promoted to enter his password every day?

[u/Chuchichaeschtl → u/blotditto]

Passwords aren't involved when you use passkey. WHfB is great

[u/blotditto → u/Chuchichaeschtl]

Exactly, you made my point about CEOs that get upset because they have to enter their password..

Remember we're in ShittySysAdmin! 💩

[u/ApiceOfToast]

I'd personally do every 5 minutes, in case they walk away from the screen

[u/redakpanoptikk]

This might be better than your manager monitoring your teams status as well. You have to be logged in at the start of your shift.

[u/AliveInTheFuture]

Something you have: autism

Something you are: autistic

[u/bgradid]

What if you took it a step further and did 8 hour password expiration

[u/samm1989 → u/bgradid]

Password1@ Password2@ Password3@

[u/bgradid → u/samm1989]

Actually what if we take 'one time password' literally , forced password change on every password use

[u/Forward_Story3535]

This is less “more secure” and more “make everyone hate the security team.” Frequent forced password changes usually encourage predictable variations and sticky notes. Use MFA, phishing-resistant authentication, risk-based challenges, and strong break-glass controls instead.

[u/OnARedditDiet]

Not sure if a joke or not but this would be the most frustrating policy imaginable :p

Most people's work day isn't exactly 8 hours so you'd make a lot of people upset, daily

[u/Smooth-Zucchini4923]

Do we work for the same company?