Uncontrolled access issues


#1

We do have issues with uncontrolled access to administrator accounts and frequent users, What is the best solution to this? We want to prevent damage on critical systems. Are there any solutions that you could suggest?


#2


#3

If you have uncontrolled access to admin accounts then you have huge issues, admin accounts should be restricted to a few select individuals. I would implement a two stage account access like: their normal username/password then have to enter an access code sent to their phone or email.


#4

Is this the same solution being referred to by least privilege solutions ? We are actually looking for a tool to intensify data accessibility since we deal with most confidential data and invoices that needs to be retained for at least 5 years.

Our IT system is good as it is, but this has been an observation with our recent external audit which we need to comply with.