The privileged IDs have the highest level of authority in an information system. Correctly controlling and operating the IDs is essential to comply with various audits and standards and strengthen internal control. It works as well as to minimize damage resulting from external and internal unauthorized acts. On the other hand, many companies are still seeking the solution to problems of implementation and management to control the privileged IDs. In this session, we will introduce the best practice on how to correctly control and operate the privileged IDs.