Mechanisms exist to ensure privilege change requests require additional levels of authentication.
Does the organization ensure privilege change requests require additional levels of authentication?
- new control