One of the eight mitigation strategies in the Essential Eight, checked against 7 tests at Maturity Level One.
Administrative accounts can change nearly anything, so this strategy limits who holds them, what they can reach, and keeps a record of what they do.
Why it matters
Privileged accounts are the target in nearly every serious breach. One over-privileged IT or vendor account can expose finance, HR and core business systems in a single step.
Where Intelligence Group fits
- Grant administrative rights only to roles that truly need them
- Use separate accounts for administration and everyday work
- Re-validate privileged access on a regular cycle
- Stop privileged accounts from reading email or browsing the web
- Log and archive privileged actions for review
Where Intelligence Group fits
Intelligence Group rates this strategy from the evidence your organisation already generates, reports the maturity level it supports, and sets out the next step to lift it.
Official guidance: ASD Essential Eight Maturity Model