BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Confessions of an Informed IT Director

Posted April 8, 2011    Peter McCalister

Hi, my name is Barney, I’m an IT Director at a multi-national telecommunications company and it’s been 2 years, 4 months, 1 week, 3 days and 11 hours since my last failed audit. (All together now) HI BARNEY!

I know this is a support group for IT Directors suffering from governance, risk and compliance issues, and candidly I did have a  problem at one time.  I started out apathetic like Bob and then paranoid like Betty, but one day I came upon some research on least privilege and privilege identity management and the rest, as they say, is history.

What I learned is that there is a class of software that allows me to control access at a very granular level for my desktops, servers, virtual and cloud environments based on policy and role.  This way everyone now only has access to do what the company wants them to do but still is monitored at a keystroke or event level for audit, compliance and remediation issues.  I no longer have to fear insider attacks nor do I have to tolerate groups complaining that security controls inhibit productivity.  Whenever there is a need to change policy I can make a centralized modification and have it propagated enterprise wide as required.

So now I like to come to these meetings to hear other’s “horror stories in the making” to remind myself why I continue to foster a least privilege solution across my extended enterprise.

Leave a Reply

Additional articles

dave-shackleford-headshot

Looking back on information security in 2014

Posted December 16, 2014    Dave Shackleford

Dave Shackleford is a SANS Instructor and founder of Voodoo Security. Join Dave for a closer look at the year in security, and learn what you can do to prepare for 2015, with this upcoming webinar. 2014 has been one heck of an insane year for information security professionals. To start with, we’ve been forced…

Tags:
, ,
patch-tuesday

December 2014 Patch Tuesday

Posted December 9, 2014    BeyondTrust Research Team

This month marks the final Patch Tuesday of 2014. Most of what is being patched this month includes Internet Explorer, Exchange, Office, etc… and continues a trend of the greatest hits collection of commonly attacked Microsoft software. Probably the one thing that broke the mold this month is that for once there is not some…

Tags:
,
Chained to the phone

“I’d love to come, but I’m on-call”: Privilege management can relieve holiday help desk headaches

Posted December 3, 2014    Jason Silva

Part of working in IT means you put in your time “on-call.” Companies either don’t realize there is a better way to allow users to maintain administrative access to endpoints, or they remove admin rights from users but don’t account for the resulting operational inefficiencies.

Tags:
, , , , , , ,