doctator/bin-there-done-that
doctator/bin-there-done-that
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
bin-there-done-that/genesishostingmd/access/least-priv.md

630 B
Raw Blame History

Least Privilege Policy

Genesis Hosting enforces least privilege access for all systems.

Principles

  • Users are given the minimum level of access necessary to perform their work
  • Admin tools are isolated by function (e.g., billing vs. system access)
  • Escalation of privileges must be requested, documented, and time-bound

Tools in Use

  • WHMCS permissions are restricted by group
  • SSH access is limited using AllowUsers and firewalled IPs
  • TeamTalk server admins are rotated and audited monthly

Review Cycle

  • Access roles are reviewed quarterly
  • Logs of access changes are stored and rotated every 90 days