Ensure Logging for All Administrative Functions Read more about Ensure Logging for All Administrative Functions
Use a Separate Application for Administration Read more about Use a Separate Application for Administration
Do Not Use Request Information For Access Control Read more about Do Not Use Request Information For Access Control
Make Coarse Grained Access Control Mandatory Read more about Make Coarse Grained Access Control Mandatory