Some ICS components have their own user and authorisation management system. If this is inadequately designed, employees may share the same user accounts, or the authorisations of employees who have left the company or service providers no longer working for the company may not be deleted. This may ultimately allow unauthorised persons to access ICS components.