What type of processes have people come across to control the passwords on validated Excel spreadsheets.
I’ve seen companies where IT Depy keep them in sealed envelopes, passwords documented in URS documents as a requirement “The password shall be …” and situations where no one knows the password and the person who created the sheet is long gone.
Envelopes and passwords contained in URS doucments I have seen before.
I sometimes leave them in the Part 11 section of the document. All depends on personal preference or the policy of the company.
The important thing is to have them documented somewhere.
If your validation documents are stored in an electronic management system then it might be a good idea to give relevant access rights to those that will need the passwords.