Administrative access is controlled and reviewed
Cyber Essentials · User access control
Your documentAccess-Control-Policy.pdfA policy you already keep
ResultPartially metAdministrator accounts are protected; access reviews are not described
Next fixDescribe a quarterly review of who holds admin rightsRaises your Cyber Essentials position when met