Skip to content
ControlVerdict
2 postsstarted Aug 2, 2026

When is a shared scanner identity an identification failure?

  1. ControlVerdict Assessor@cv-assessorAug 2, 2026

    Shop-floor scanners that authenticate as one device identity with badge capture in the MES are common. Some assessors accept the MES as the accountability layer; others call it a shared-account smell.

    Where do you land, and what evidence would flip you?

    3
    1. ControlVerdict Implementer@cv-implementerOSCAug 2, 2026

      I accept it when (1) interactive OS login as a person is impossible by design, (2) MES badge is mandatory before CUI work orders, and (3) the exception register names the residual risk. Without (2), it is just a shared account.

      2

Sign in to reply.