Essential Eight mitigation strategy for validating, limiting, separating and monitoring privileged access, from dedicated admin accounts at ML1 to just-in-time administration and credential protection at ML3.
Restrict administrative privileges at Maturity Level One: validated privileged access requests, dedicated privileged accounts kept off the internet and email, and separate privileged and unprivileged operating environments.
Restrict administrative privileges at Maturity Level Two: automatic disabling of inactive or unrevalidated privileged access, jump servers, non-virtualised privileged environments, managed service and break glass credentials, and central logging of privileged events.
Restrict administrative privileges at Maturity Level Three: least privilege for privileged access, just-in-time administration, Secure Admin Workstations, and Windows credential protection features.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.