ASD Essentials for Enterprise IT PRO-05: Secure administration: dedicated hardened administration environments, explicit session controls with time-bound privilege, and recorded administrative actions

What does PRO-05 require?

Administration happens only from dedicated, hardened environments kept apart from ordinary user workloads; a privileged action requires an explicit session to be established first, with privileges granted for a limited time; and every administrative or management change to systems, configurations or controls is recorded with who did it, when and to what. Marked for privileged environments and the other technical domains the matrix shows.