Local administrator access is consistently limited to authorised personnel and reviewed regularly
Keeping the local admin list approved and current is A.5.18's provisioning-and-review discipline applied to one specific, high-impact access right rather than access rights generally.
Keeping local admin rights limited to a current, approved list and re-verifying it regularly operationalizes A.8.2's expectation that privilege stays tightly scoped.
https://sekit.ai/api/mcp/crosswalk