More than four in five organizations say a single compromised credential could affect multiple major systems.