BeyondTrust

Security In Context

BeyondTrust’s blog tackles important issues for your company including network and data security.
Learn more and protect your company!

Logs – A Gold Mine of Information

Post by admin May 4, 2011

In an earlier post I talked about tapping in to the power of the information in our privileged identity management system to improve productivity. Those detailed compliance logs you have been generating are a gold mine of information.

Analyzing large amounts of data is a growing trend. From Google to WalMart companies are building their strategies on complex models and algorithms.

Systems logs can be used not just to look for patterns that indicate a security threat, but those same patterns can show where security and other procedures such as improper configurations of new systems are hurting productivity. Finding those patters can help uncover opportunities to better train, simplify procedures, and uncover best practices that not everyone is following. And once those best practices are discovered you can use controls to ensure that best practices are being followed.

Realizing that value requires a data analysis strategy and a strategy for how to engage the organization in using that analysis. Your data analysis strategy needs to consider the roles of monitoring, logging and reporting, as well as when and how to combine data from different sources. Single silos of data are simpler to use but correlating data across silos provides more powerful insights. Ultimately you will need both, but your data analysis strategy needs to focus on providing insights your organization can act on. And that’s where you need to consider your how to engage your people in using the data. More on that next week.

Leave a Reply

Additional articles

2

Organizing your PowerBroker Desktops Rules

When tackling a project to remove administrator privileges from users, it is critical to understand what applications and tasks will be impacted. Some things just break or won’t function properly when users are no longer administrators. Of course, PowerBroker Desktops is designed to elevate those apps and tasks that require administrator privileges so that there…

Post by admin October 20, 2012
Tags:
,
img

Don’t say “Lockdown”!

Here at BeyondTrust, we have been fortunate to be able to speak with thousands of security professionals in dozens of industries, and it is astonishing how differently organizations assess risk and approach computer security. Some organizations are very strict about security and are able to completely lock down desktops. Others are significantly more lax about…

Post by admin October 15, 2012
Tags:
, ,
img

PowerBroker for Windows – Solution Deployment

PowerBroker for Windows (PBW) is designed to integrate directly into your corporate Active Directory (AD) structure without modifying your existing schema. In the asset labeled “1” below, an administrator simply loads a Group Policy Option (GPO) snap-in onto an asset that uses the Microsoft Management Console (MMC).  The administrator can then create policies and rules…

Post by Morey Haber October 11, 2012
Tags:
, , , , , , , ,