Article / Access & Continuity

A Shared Inbox Is a Shared Identity

Shared inboxes combine information and authority while obscuring which person read, sent or changed an instruction.

Written byJonathan P. De Collibus

Founding Partner, Svperior / Cyber

Published16 July 2026

DisciplinesCyber / Systems Engineering

The answer

A shared inbox is efficient because several people can become one institutional voice. That same design weakens attribution, recovery and revocation when credentials or forwarding are shared.

A shared inbox is efficient because several people can become one institutional voice.

Where this breaks

That same design weakens attribution, recovery and revocation when credentials or forwarding are shared.

The operating move

Use named delegated access, role-based sending, independent logs and a clear owner for consequential messages.

Value object — The operational card

- Mailbox purpose

- Named delegates

- Send-as authority

- Forwarding and recovery

The test

Send a controlled high-value instruction through the inbox. The record should prove which person caused every step.

Evidence

Sources

NIST Digital Identity GuidelinesNIST Digital Identity Guidelines
Primary authority
NIST SP 800-34 Rev. 1: Contingency Planning GuideNIST SP 800-34 Rev. 1: Contingency Planning Guide
Primary authority
FINMA: Revised circular on operational risks and resilienceFINMA: Revised circular on operational risks and resilience
Primary authority

Expert review

Ross BelhommePartner, Svperior / Legal

Author

Jonathan P. De Collibus

Jonathan co-founded Svperior in 2014 and leads its cyber practice. His work sits where adversarial pressure, technical architecture, and consequential decisions meet, with experience across clinical, financial, public-sector, and private-client systems where confidentiality, continuity, and technical correctness carry material consequences.

Cyber strategy / Adversarial assessment / Security architecture / Private systems

Private inquiry

Need to apply this to a specific situation?

Send us the initial context. If the matter fits, we will respond directly.

Send private inquiry