The fourteen findings

In a fixed order. Each one names the accounts it fires on, the column that raised it, the clause behind it and the question for the account owner or the reviewer.

1. A leaver's own account is still enabledleaver enabled
2. Owner has left, or owner not recognisedowner gone
3. No owner named, or a team named with no accountable personno owner
4. Dormant for more than the thresholddormant
5. Privileged, and orphaned or dormantprivileged gap
6. Password or key not changed within the period, or nevernot changed
7. Service or system account that allows interactive logininteractive service
8. Credential stored in code, a config file or a scriptstored in code
9. Shared or generic login used by peopleshared login
10. Not reviewed within the intervalnot reviewed
11. AI agent credential with no owner or no reviewagent unowned
12. Created with no approval recordedno approval
13. Vendor default or built-in account enabledvendor default
14. A secret where a label belongssecret