Standard

Privileged Access Management Standard

To ensure that privileged accounts are managed, monitored, and revoked according to a documented, auditable process that reduces the attack surface available to insider threats and external adversaries.

Type

Standard

Version

2.0.13

Date

2026-10-21

Owner

Chief Information Security Officer

Approving authority

Governance Library Maintainer

Classification

Public

Confidentiality

Public

Category

Information Security

Review frequency

Annual and upon material threat, framework, or regulatory change

Licence

CC BY-SA 4.0

Read the full text on GitHub → (opens in a new tab)

Outline

• 1. Purpose
• 2. Scope
• 3. Governance and accountability
• 4. PAM approach
• 5. Privileged account lifecycle
• 6. Incident response
• 7. Framework alignment

Frameworks it maps to

• ISO/IEC 27001:2022
• NIST SP 800-53 Rev. 5
• COBIT 2019
• CSA CCM v4.1
• CIS

Related documents

• Identity and Access Management Policysecurity
• Information Security Policysecurity
• Authentication and Password Management Standardsecurity