New advice on implementing high-risk and ‘break-glass’ accesses in cloud services.