Why it matters
One person, one identifiable account — the basis for holding anyone accountable for anything.
How a self-led small team implements it
No shared logins, ever. If you're still sharing an admin account, this is your first fix.
What auditors expect to see
User account list showing 1:1 mapping to individuals.
Track A.5.16 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS