Focuses on administrator accounts, credential vaults, just-in-time access, session recording, service identities, and controls that limit privileged compromise.
