The historic-preservation office stores sock-puppet passwords in the same shared spreadsheet as the public website CMS credentials. What credential-hygiene change is required?
Select an answer to reveal the explanation.
Short Explanation
Sock-puppet passwords living next to the public-site CMS password is two keys on one sticky note. Lose the sheet, and both the research personas and the production website are gone. Research credentials need their own protected store, away from civic production logins.
Full Explanation
Research personas require separate, protected credentials so a leak of the OSINT notebook or a shared password list does not also unlock production civic systems. Mixing sock-puppet secrets with website CMS passwords is a hygiene failure. Reuse, intranet publication, and personal-email backups expand the blast radius. OPSEC for PORP includes treating research credentials as their own inventory.