Adminstrator rights/security

What are the chief security considerations with regard to the Administrator group, and what, if any are the system controls that could be impletmented realistically