Skip to content
← All posts

Break-glass access that is a control, not a backdoor

Emergency access granted immediately and reviewed afterwards — because break-glass nobody reviews is standing access with a dramatic name.

Break-glass

In an incident you cannot wait for an approval. So break-glass is granted at once — and it lands in a review queue whether or not it was used.

The review is the control. Everything done under the grant is on the audit chain; the queue makes sure a person reads it.