01
Primary Access & Security Controls
- ✓ Use an isolated 1Password access node.
- ✓ Never share master credentials.
- ✓ Grant the minimum permission per platform.
- ✓ Record every grant with the date and person.
- ✓ Revoke access the same day when offboarding.
- ✓ Track work on centralised project boards. No off-platform hidden DMs.
Control point: if access cannot be granted with a clear owner, minimum permission level, and same-day revocation path, stop and resolve the gap first.
