Maintain administrator continuity

Control principle

No important service should depend on one person's memory or identity.

One employee or contractor holds the practical knowledge, elevated access, recovery path, or vendor relationship for a critical system.

Use it in the active service

Start with these controls

1. Confirm nonprofit ownership of tenant, billing, domain, source, integration, backup, and recovery accounts.
2. Name a primary and backup administrator with approved least-privilege roles and secure recovery methods.
3. Document recurring duties, safe escalation, vendor contacts, audit locations, and the first recovery steps.
4. Run a quarterly handoff exercise and remove external or former-staff access that lacks a current purpose.

Pause point

Do not let operating pressure erase nonprofit ownership

Never place passwords, recovery codes, tokens, or personal data in a general runbook. Use approved identity and secret-management controls.