Privileged access rights
A.8.2
-
Last updated
Applicable
Catalog reference
Restrict, review, and monitor the allocation and use of privileged access rights — those that grant broader permissions than ordinary users — so they are used only when necessary.
Narrative — how we satisfy this requirement
Privileged accounts are separate from daily accounts, issued to named engineers, and protected with hardware security keys.