Glossary · P

Privileged access management

Privileged access management is the control of accounts that can change systems, read everything or grant access to others, through vaulting, just-in-time elevation, session recording and review.

Extended definition

In more detail.

Administrative accounts are the attacker’s objective because they turn one compromised machine into the whole environment. Managing them means knowing where they are, removing standing privilege where possible, requiring phishing-resistant authentication, recording their use and reviewing it. Vendor and service accounts with privilege are the most commonly forgotten category.

In our work

Where it appears.

See privileged access management under Zero Trust and Secure Architecture.

By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days

Tell us what must not fail.

Discuss a Requirement →