← CIS Controls v8 in plain English

5.4 IG1

Control 5 / Account Management

Restrict Administrator Privileges to Dedicated Administrator Accounts

Think of it likeOnly giving the master key to trusted family members and not using it for everyday tasks.

In plain English

Administrator powers are reserved for dedicated accounts used only for critical tasks, never for everyday work.

Related CSF subcategories (unofficial mapping)

PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties.