Quarterly RMM portal access review
Overview
Stale tech accounts with god-mode access equal breach waiting—review quarterly.
Checklist
Accounts match HRIS active list; roles minimized; MFA on all; API keys rotated.
Client sub-accounts
Customer break-glass login exists? Expired after project? Remove.
Vendors
MSP tool vendor support delegates time-boxed.
Sign-off
Security lead attestation stored PDF.
Automation
Export user list via API diff against HR CSV where integrated.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...