Privileged identity and account recovery
The dominant enterprise intrusion path is a phone call to a help desk, followed by a session that never re-authenticates. These essays cover reset procedures, step-up at the action, and privileged elevation evidence.
Start here
Identity continuity is the reference piece behind this topic.