My MAC asks for credentials to elevate - surely that is secure?

I have a single account on my MAC and I have to enter my password again if I wish to elevate my access - surely that is OK?

Unfortunately the answer is NO, this is not acceptible within the standard and you require a completely seperate account for use for admin purposes.

The standard requires that your "day-to-day" account is not an administrative account

See Account Separation