Just-in-time access (JIT) is an authorization concept where privileged access rights are granted only when specifically needed and automatically revoked after a defined time period. The principle complements least privilege: instead of permanently elevated rights, privileges are activated only for the duration of the task. PAM (Privileged Access Management) solutions implement this concept technically. For your ISMS, JIT reduces the risk from permanently active administrator accounts. An attacker who compromises such an account ideally finds no active privileges. Document the JIT process in your access control policy.