# SEC01-BP02: Secure account

## Description

Bảo mật root account và IAM.

## Implementation Guidance

- Root account MFA
- Root account minimal usage
- Strong password policies
- IAM user MFA required
- Account contact info current

## Risk Level

Critical - Compromised root account is total compromise.
