Privileged access management

Practices and tools that centrally control high-privilege accounts such as domain admins, server root and database administrators. Typical features are vaulting and rotating their passwords, granting admin rights only when needed and only for as long as needed, and recording sessions for audit. Ransomware operators usually go after these accounts, so controlling them limits how far an intrusion can spread.

Further reading: www.ncsc.gov.uk

All terms