A newly acquired subsidiary uses shared administrator accounts for critical infrastructure management. The integration team wants to immediately enforce individual accounts, but operations warns this could disrupt 24/7 production systems.
What is the MOST appropriate next step?
A. Implement privileged access management with session recording for shared accounts
B. Require individual accounts with emergency break-glass procedures for continuity
C. Assess the shared account inventory and map dependencies before enforcing changes
D. Accept the risk temporarily and schedule individual account rollout for next quarter