A mitigation strategy in the ASD Essentials (currently the Essential Eight), assessed against 7 tests at Maturity Level One.
Administrative accounts can change almost anything, so this strategy limits who holds them, what they can reach, and keeps a record of what they do.
Why it matters
Privileged accounts are the prize in almost every serious breach. A single over-privileged IT or vendor account can expose finance, HR and core business systems at once.
How Conformance helps
- Grant admin rights only to roles that genuinely need them
- Use separate accounts for admin and everyday work
- Require re-validation of privileged access on a regular cycle
- Prevent privileged accounts from reading email or browsing the web
- Log and archive privileged actions for review
How Conformance helps
Conformance validates this strategy from the evidence your organisation already produces, shows your maturity level, and tells you the next step to raise it.
Official guidance: ASD Essential Eight Maturity Model