Critical enterprise password management methods in the age of ransomware

I have to develop a procedure for vaulting critical passwords used for administration accounts. For example, elevated privilege service account passwords, DSRM passwords, other recovery manager passwords, break-glass accounts, etc. These are accounts critical for rebuilding the environment from backups in case of a catastrophic event such as ransomware attack. I have several ideas on how to approach this ( Im 90% there) but I wanted to pick your brains and see what you all can think of. Has anyone …

age critical cybersecurity enterprise management password password management ransomware the age