- 1.1 Ensure Corporate Login Credentials Are Used (Manual)
- 1.2 Ensure Multi-Factor Authentication is Enabled for All Non-Service Accounts (Manual)
- 1.3 Ensure Security Key Enforcement is Enabled for All Admin Accounts (Manual)
- 1.4 Ensure Only GCP-Managed Service Account Keys Are Used for Each Service Account (Automated)
- 1.5 Ensure Service Accounts Do Not Have Admin Privileges (Automated)