Question

During a review of a large enterprise's identity and access management program, an IS auditor finds that all system administrators hold standing (always-on) domain administrator privileges, and these credentials are used for both routine tasks and privileged operations. Which recommendation would BEST reduce the risk associated with this arrangement?

Accepted Answer

Implement just-in-time privilege elevation so administrative rights are granted temporarily and only when needed

Answer

Require administrators to change their privileged account passwords every 30 days

Answer

Enable multifactor authentication on all administrator workstations

Answer

Log all administrator activity to a centralized SIEM for later review