Meaning
Active digital identities or permissions remain associated with an individual who no longer holds a role within the system. Identification of orphan credentials is part of a security audit to ensure that former employees cannot access sensitive company data. These accounts often exist because the offboarding process failed to notify every department of a departure.
The risk ends when the account is disabled or deleted.
Risk Exposure
Unused login details provide an unmonitored entry point for hackers to enter a corporate network. Because orphan credentials are not being watched by a real user, malicious activity can go unnoticed for a long time. This lack of oversight allows an attacker to move through the system without raising alarms.
Monitoring is required.
Inventory Cleanup
Regular reviews of the user list help administrators find and remove accounts that are no longer needed. Locating orphan credentials involves comparing the current payroll list against the active directory of the IT system. Any name that appears on the IT list but not the payroll list is a candidate for removal.
This work is tedious.
Security Vulnerability
Weak points in the digital defense occur when old passwords are never changed and permissions are never revoked. The presence of orphan credentials means that the company’s attack surface is larger than it needs to be. Reducing this surface area is a primary goal of a security officer.
It saves the firm. Security is improved. Records are updated.
