BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Least Privilege Can Help Solve IT Negligence

Posted March 19, 2012    Peter McCalister

The Ponemon Institute along with Trend Micro recently surveyed more than 700 ITprofessionals on the subject of the human factor in data breaches. According to the survey, 78 percent of respondents have experienced a data breach as a result of negligent or malicious employees or other insiders. This doesn’t surprise us here at BeyondTrust. We deal with businesses and organizations every day that are looking for solutions to mitigate insider attacks regardless if it’s intentional or negligent misuse of privilege.

Every enterprise has good people and bad people. Between dumb IT errors and spur-of-the-moment decisions, an environment where users have unlimited access to company resources is a dangerous place.

The survey also identified the top 10 practices employees routinely engage in that put companies at greater risk. The most popular risky practice is connecting computers to the Internet through an insecure wireless network. This employee practice can be easily resolved by using BeyondTrust PowerBroker Desktops which allows restricted users to maintain authorized computer settings such as, connecting to local printers, IP configuration settings to connect to a wireless networks, even the ability to change time zones. Another common risky practice among negligent employees is reusing the same password and username on different websites. This can be put to a stop by deploying PowerBroker Identity Services, a centralized enterprise solution to authenticate users in the same way across all platforms, which can enforce user password policy for password aging, history, etc.

The BeyondTrust ecosystem creates a least privilege environment within enterprises to reduce the risk of insider threats. Monitoring and alerts, reporting, and management tools siphon through web and code based interfaces to centrally control requested network tasks. As enterprises begin to pay more attention to privilege and access, they begin to embrace the principal of least privilege as it relates to improving overall security.

Leave a Reply

Additional articles

VMware Hardening Guidelines-img3

How to Audit VMware ESX and ESXi Servers Against the VMware Hardening Guidelines with Retina CS

Posted February 27, 2015    BeyondTrust Research Team

Retina CS Enterprise Vulnerability Management has included advanced VMware auditing capabilities for some time, including virtual machine discovery and scanning through a cloud connection, plus the ability to scan ESX and ESXi hosts using SSH. However, in response to recent security concerns associated with SSH, VMware has disabled SSH by default in its more recent…

Tags:
, , , ,
dave-shackleford-headshot

Privileged Passwords: The Bane of Security Professionals Everywhere

Posted February 19, 2015    Dave Shackleford

Passwords have been with us since ancient times. Known as “watchwords”, ancient Roman military guards would pass a wooden tablet with a daily secret word engraved from one shift to the next, with each guard position marking the tablet to indicate it had been received. The military has been using passwords, counter-passwords, and even sound…

Tags:
, , ,
Privileged Account Management Process

In Vulnerability Management, Process is King

Posted February 18, 2015    Morey Haber

You have a vulnerability scanner, but where’s your process? Most organizations are rightly concerned about possible vulnerabilities in their systems, applications, networked devices, and other digital assets and infrastructure components. Identifying vulnerabilities is indeed important, and most security professionals have some kind of scanning solution in place. But what is most essential to understand is…

Tags:
, , , , ,