Secure system administration advice from NCSC.  Good advise for setting up Privileged access workstations (PAWs) and bastion hosts.

Secure system administration
Design principles for IT and OT systems to help you develop and implement your own system management strategy to protect your most sensitive data.