Identifying and reducing the number of privileged accounts

Enforcing the principle of least privilege

Routinely reviewing role-based privileges to ensure the associated privileges are still relevant and required

A well-documented off-boarding process