Control: ism-1508; Revision: 2; Updated: Sep-21; Applicability: ALL; Essential Eight: ML3 ​

Privileged access to systems and applications is limited to only what is required for users and services to undertake their duties.