ility of those services.  Organizations 
should be aware of these techniques as well as common defense in depth 
protection strategies to contain the damage (and possible litigation) resulting 
from a breach.  Organizations should look to prohibit the sharing of account 
credentials between users and services, and leverage strong two-factor 
authentication techniques where possible. 
3.2 Controls 
CCM IS-07: Information Security - User Access Policy 
CCM IS-08: Information Security - User Access Restriction