Monetary Authority of Singapore Technology Risk Management Guidelines 9.2: 9.2 Privileged Access Management

Privileged access can severely damage stability and security, so privileged accounts should be granted only on need-to-use, with their activity logged and reviewed as part of ongoing monitoring; the FI should also manage and monitor system and service accounts used by operating systems, applications and databases for suspicious or unauthorised activity.