Credential Inventory
- James W.
- 3 days ago
- 1 min read
LinkedIn Post 8: Credential Inventory
You can't manage what you don't measure.
Start with a spreadsheet:
| Device | Default Credentials | Changeable? | Action |
| --- | --- | --- | --- |
| HVAC-01 | admin/admin | No | Plan replacement |
| ACC-01 | admin/password123 | Yes | Change to random credential |
| LIGHT-GW-01 | API key: factory_secret | No | Contact vendor re: firmware update |
This inventory is your first line of defense against PSTI enforcement action. It shows you're aware of the problem, have identified devices, and have a plan.
Spreadsheet done? Next step: prioritize high-risk devices and start credential rotation.
Document every change: old value, new value, date, technician.
Comments