Method to prevent root level access attack and measurable SLA security and compliance platform

A system comprising:

• a target device;
• a multiple custody approval subsystem comprising:
• a multi-user authorization pool including a plurality of authorization users to approve of any detected change at the target device;
• one or more hardware processors configured to:
• monitor the target device;
• detect a change at the target device performed by a user having an administrative credential;
• in response to a detection of the change having been performed by a user having the administrative credential at the target device:
• transmit a request message to authorization devices of the authorization users of the multi-user authorization pool, the request message requesting from the authorization users an indication of whether the detected change is approved;
• receive a plurality of response messages from authorization devices of the multi-user authorization pool, each of the plurality of response messages indicating whether the detected change is approved by the corresponding authorization user;
• determine, based on at least three of the plurality of response messages indicating a disapproval, that the detected change is disapproved;
• and
• transmit, in response to the determination that the change is disapproved, an instruction message to the target device to instruct the target device to rollback to an earlier state.