An anonymous reader writes "I'm part of a growing organization. We're currently writing and implementing various policies. Currently, I'm stumped with how to manage passwords. Different people within the IT department need different levels of access. For example, the techs don't need to know the firewall passwords. Along the same lines, I, being the security administrator, would not need the SA/sys passwords for our databases.
How to large companies deal with this? I though of creating a few spreadsheets — one for "Top Secret" passwords (i.e. routers, firewalls), another for "Classified" passwords (i.e. windows service accounts, domain admin account, database passwords, DNS management) and finally a "Sensitive" password database for general passwords (i.e. configuring new phones and other day-to-day accounts used by tech support).
Those are my thoughts but what I want to know are:
1.) Whats the typical scheme used in a large company? I'm sure it is pretty customized to each organization's needs, but there's gotta be some similarity. If not:
2.) How does your company go about this?
3.) Any suggestions?"