Privileged access management procedure
Download this document free
Get this document with your free trial. Choose from the full Complyzard library.
Try 1 month free30 days free, then $19/month. Trial terms apply. Card required. Cancel anytime.Document information
For identity, system and control owners to request, authorize, issue, monitor, review, recover and revoke privileged access for people and service identities.
- Document type
- Procedure
- Format
- DOCX
- Pages
- 9
- Language
- English
- Version
- 1.0
- Updated
- 2026-09-15
- Category
- Information security
- Licence
- Internal use
Description
For identity, system and control owners to request, authorize, issue, monitor, review, recover and revoke privileged access for people and service identities.
Contents
- Document control
- Purpose of this procedure
- Identify consequential privileged actions
- Map the administrative path
- Separate eligibility from activation
- Define the action, resource, and duration
- Approve privilege according to consequence
- Activate privilege through a trusted path
- Observe the approved access boundary
- Respond to loss of monitoring
- Remove the effective capability
- Design emergency access
- Control supplier privilege
- Control non-human privileged access
- Reconcile effective privilege
- Respond to suspected privileged compromise
- Measure residual privileged capability
- Rehearse ordinary and emergency administration
Version history
- v1.015/09/2026