Effective security of modern IT infrastructure requires special attention to access management and the protection of digital identities within the organization. Privileged accounts represent primary targets for attackers, given the extensive level of authorization they possess over critical systems. For this reason, implementing strict control policies is fundamental to limiting the attack surface.
Best practices for MFA and privileged accounts
- Implementing phishing-resistant MFA: Use authentication methods based on secure standards, such as physical security keys or dedicated authenticator apps, avoiding SMS codes that can be easily intercepted.
- Strict separation of work accounts: System administrators must use standard accounts for daily activities, such as email or web browsing, and privileged accounts dedicated exclusively to administrative tasks.
- Principle of least privilege (PoLP): Limit administrative rights to the minimum level necessary to perform job duties and implement temporary access, valid only for the duration of the intervention.
- Auditing and monitoring activity: Monitor the use of privileged accounts in real time and ensure that security logs are stored in a centralized manner and protected against modification.
- Rapid deprovisioning of access: Establish clear procedures for the immediate suspension of accounts and access rights for employees who leave the company or change their internal role.
These cyber hygiene and access control measures are essential for compliance with the NIS2 directive and the DORA regulation, applicable to many companies in Romania. Implementing MFA and securing administrative accounts represent mandatory requirements to demonstrate a robust security posture during compliance audits.
Security News, in your inbox
New News articles, with their full text and a link to the website. One daily email at 09:00 Romania time. No new articles in your chosen language, no email.
