UnixTime

Research Note

Privileged Access Register

Use this register to record privileged accounts, roles, approvals, scope, expiry, and review status.

On this page

When to use this

Use this register to record privileged accounts, roles, approvals, scope, expiry, and review status.

Register

User Privileged ID/role System Business justification Approved by Start date Expiry/review date Logging enabled? Status
TBD TBD TBD TBD TBD TBD TBD Yes/No Active/revoked

Minimum checks

  • Privilege is business-justified.
  • Separate admin ID is used where feasible.
  • Logging is enabled.
  • Review date is defined.
  • Removal process is clear.