Least privilege
Grant only the access actually required for the task.
SECURITY & TRUST
Security belongs in the support process.
Not bolted on afterward.
Least privilege, MFA, encrypted transport, controlled remote access, backups, auditability, and explicit approval for higher-risk changes.
MFA & identity
Protect administrative and cloud access with strong identity controls.
Safer remote access
Use authenticated private networking and controlled management paths.
Recovery matters
Security without backup and recovery planning is incomplete.
Human confirmation
Higher-risk remote actions should require explicit authorization.
Auditable work
Important managed changes should be attributable and verifiable.
No secrets by SMS.
SMS is useful for notifications
and support interactions,
not passwords,
recovery codes,
private keys,
or other secrets.