Privileged users use separate privileged and unprivileged operating environments.

Privileged operating environments are not virtualised within unprivileged operating environments.

Unprivileged accounts cannot logon to privileged operating environments.

Privileged accounts (excluding local administrator accounts) cannot logon to unprivileged operating environments.

Administrative activities are conducted through jump servers.

Credentials for local administrator accounts and service accounts are long, unique, unpredictable and managed.

Privileged access events are logged.

Privileged account and group management events are logged.

Beyond Cyber 101 mentorship into cybersecurity and beyond.