Server admins on the city virtualization cluster use uncontrolled sudo and local admin elevation with little logging. What should governance require first?
Select an answer to reveal the explanation.
Short Explanation
Sudo without a paper trail is a blank check. Put elevation on a leash—just-in-time or break-glass style—and record who did what. That is how you govern privilege escalation instead of hoping nobody notices.
Full Explanation
Privilege escalation must be controlled (just-in-time or approved elevation), minimized in duration and scope, and audited for forensic and compliance value. Uncontrolled sudo or local admin without logging defeats accountability. Shared root passwords and disabling OS mandatory controls increase risk; eliminating all admin paths without a managed alternative breaks operations.