Controlled support access

Principle

Support must not receive permanent implicit access. A request states purpose, scope, and expiry; the customer owner approves or rejects it.

Process

1. 1

   Match the request to an existing ticket.

2. 2

   Review resources and duration.

3. 3

   Approve the minimum scope or reject.

4. 4

   Monitor and end the active session.

5. 5

   Review the activity history.

Emergency termination

End the session immediately after unexpected activity and report the ticket ID to security@profitvena.ru.