BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Least Privilege Can Help Solve IT Negligence

Posted March 19, 2012    Peter McCalister

The Ponemon Institute along with Trend Micro recently surveyed more than 700 ITprofessionals on the subject of the human factor in data breaches. According to the survey, 78 percent of respondents have experienced a data breach as a result of negligent or malicious employees or other insiders. This doesn’t surprise us here at BeyondTrust. We deal with businesses and organizations every day that are looking for solutions to mitigate insider attacks regardless if it’s intentional or negligent misuse of privilege.

Every enterprise has good people and bad people. Between dumb IT errors and spur-of-the-moment decisions, an environment where users have unlimited access to company resources is a dangerous place.

The survey also identified the top 10 practices employees routinely engage in that put companies at greater risk. The most popular risky practice is connecting computers to the Internet through an insecure wireless network. This employee practice can be easily resolved by using BeyondTrust PowerBroker Desktops which allows restricted users to maintain authorized computer settings such as, connecting to local printers, IP configuration settings to connect to a wireless networks, even the ability to change time zones. Another common risky practice among negligent employees is reusing the same password and username on different websites. This can be put to a stop by deploying PowerBroker Identity Services, a centralized enterprise solution to authenticate users in the same way across all platforms, which can enforce user password policy for password aging, history, etc.

The BeyondTrust ecosystem creates a least privilege environment within enterprises to reduce the risk of insider threats. Monitoring and alerts, reporting, and management tools siphon through web and code based interfaces to centrally control requested network tasks. As enterprises begin to pay more attention to privilege and access, they begin to embrace the principal of least privilege as it relates to improving overall security.

Leave a Reply

Additional articles

normal-blog-img

New IT Security Best Practices for Maintaining “Business as Usual” Despite Evolving Threats

Posted August 13, 2014    Morey Haber

It’s time to get back to business. Here in the U.S., summer vacations are wrapping up and businesses are looking forward to closing out 2014. Over the past year, we’ve seen several incidents that warrant changes in the ways consumers make purchases and businesses conduct transactions. Consider last week’s theft of a whopping 1.2 billion…

Tags:
, , ,

Retina Vulnerability Audits – August 2014 Patch Tuesday

Posted August 12, 2014    BeyondTrust Research Team

The following is a list of Retina vulnerability audits for this August 2014 Patch Tuesday: MS14-043 - Vulnerability in Windows Media Center Could Allow Remote Code Execution (2978742) 34924 – Microsoft WMC Remote Code Execution (2978742) MS14-044 - Vulnerabilities in SQL Server Could Allow Elevation of Privilege (2984340) 34915 – Microsoft SQL Server Multiple Vulnerabilities (2984340) – 2008 34916 –…

patch-tuesday

August 2014 Patch Tuesday

Posted August 12, 2014    BeyondTrust Research Team

This August Microsoft has released nine security bulletins which account for a whole variety of critical vulnerabilities. The most critical bulletins are MS14-051 (Internet Explorer), MS14-045 (Kernel-mode), and MS14-049 (Windows Installer). MS14-043 fixes a critical code execution vulnerability within Windows Media Center (people still use that?). The vulnerability itself is specifically within a COM object…

Tags:
, , ,