PRO-05 Secure administration
3 actions under this Protect principle in ASD Essentials for enterprise IT. Each action links to plain-English guidance, audit tips and cross-framework mappings.
ASD principle statement
Systems (infrastructure, operating systems, applications and data) are administered in a secure, accountable and auditable manner.
Quoted as published. Everything else on this page is written by Control Stack.
- Function
- Protect
- Domains
The three actions
- IT.PRO-05.1Restrict Administration to Dedicated, Hardened Environments Isolated from Unprivileged User Workloads
Restricts admin work to dedicated, locked-down computers or environments kept apart from everyday email, web browsing and other user tasks.
Domains:Boundary servicesIdentity servicesCritical processes and servicesPrivileged environments - IT.PRO-05.2Require Explicit Session Establishment and Time-Bound Grants for Privileged Actions
Switches on admin access only when needed, after a fresh identity check, and switches it off automatically after a set time.
Domains:Boundary servicesIdentity servicesCritical processes and servicesPrivileged environments - IT.PRO-05.3Log Every Administrative and Management Change with User, Timestamp and Target
Records every admin or management change to systems, settings and security controls, showing who made it, when and what it changed.
Domains:Boundary servicesIdentity servicesCritical processes and servicesPrivileged environments
Back to the full Essentials for enterprise IT action list, or browse the complete control library.