Emergency break-glass admin accounts for the city identity platform are used weekly for routine changes and generate no alerts. What redesign is most appropriate?
Select an answer to reveal the explanation.
Short Explanation
Break-glass is the fire axe behind the glass—not the everyday screwdriver. Keep it rare, loud with alerts, and sealed; use normal JIT admin for Tuesday chores.
Full Explanation
Break-glass (emergency) accounts must remain exceptional, tightly controlled, and continuously monitored, with each use generating high-priority alerts and post-use review. Routine weekly use indicates process failure; JIT privileged access should cover normal administration. Publishing credentials or eliminating all emergency paths creates either exposure or unrecoverable lockout risk.