Client site responsibility.
WHAT TO ESTABLISH
Who is responsible for updates Who holds the credentials What happens if the site is compromised Who pays for cleanup
PUT IT IN WRITING
A client assuming you maintain their site when you do not is a serious problem waiting to happen.
WHAT TO PROVIDE
Individual accounts for each person Documentation of what is installed A record of credentials, handed over appropriately
WHAT NOT TO DO
Use the same credentials across client sites Hold client sites in one hosting account without separation Leave old client accounts active
THE SHARED ACCOUNT PROBLEM
A compromise affecting all your clients at once is a serious event.
Separate hosting accounts per client.
WHEN A RELATIONSHIP ENDS
Hand over everything Remove your own access Have them change credentials
WHAT TO DOCUMENT
Access, plugins, licences, backups, and who does what.
WHAT PROTECTS YOU
A written statement of responsibility.
