Shared account risk model
- Credential coupling — password + MFA forwarded together in chat.
- Offboarding lag — departed staff retain viewer access.
- Lockout concentration — one device holds all enrollments.
- Audit opacity — no roster of who can see OTP.
Mitigations
Separate MFA delivery (shared MFA platform), time-boxed viewers, quarterly reviews (checklist), migration plans to per-user access.
