Privileged Access
Privileged Break-Glass for Closing Week
Time-bound elevation for payroll admins and inventory controllers, with dual control and automatic expiry aligned to Korean filing deadlines.
Privileged access module
₩1,550,000 / month (informational)
What firms receive
Break-glass profiles activate only when two approvers acknowledge a ticket. Sessions inherit screen recording, command logging, and watermarking. Policies align to closing calendars so privileged windows automatically narrow once filings land, which prevents standing admin rights from becoming permanent crutches.
Capabilities
- Dual approval via Slack, Teams, or email OTP
- Just-in-time elevation tied to ServiceNow change records
- Automatic revocation tied to lunar filing milestones you configure
- Command allow lists for Windows and macOS admin shells
- Integration with hardware FIDO2 keys already issued to partners
- Post-session digest emailed to the risk committee
- Runbook templates for BCP drills
Outcomes teams cite
- Reduced standing local admin accounts on finance laptops
- Faster incident reconstruction when elevation is questioned
- Cleaner partner attestation letters on privileged access
Field notes
“
Break-glass windows for inventory adjustments felt tight at first, but the automatic expiry stopped weekend admin sprawl.
Practical questions
Emergency directors can unlock a one-hour window with biometric re-auth. Every override is flagged in the digest and requires retroactive written justification.