BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Reasons Why You Should Give a DAM: Part 2

Posted June 24, 2011    Peter McCalister

Continuing the thread started in a previous blog titled Reasons Why You Should Give a DAM: Part 1, today’s blog will focus on what can be done and the value you should achieve.

First, securing the database is critical. The database is where the business’ valuable data assets live, and is therefore most often the target of attack when it comes to frauds and data breaches. Controlling the users that hold elevated privileged on the database is critical to any data security effort. A complete solution to this problem must include the following:
Effective Credential Management:
- Identifying privileged accounts across database infrastructure.
- Provisioning access to and privileges on those database systems based on business justification, and quickly de-provisioning access and privilege when justification no longer exists.
Policy Based Access Control and Privilege Delegation:
- Control systems base on the principal of least privilege.
- Privileges are delegated only when needed and authorized (need and authorization based on evaluation of external context such as a change ticketing system), only for the duration to execute distinct authorized change activities.
Activity Monitoring and Closed Loop Reconciliation with Change Management:
- All activity executed by privileged users is captured, reviewed, and reconciled against change ticketing to verify that the activity was authorized, followed change management processes, and did not impact systems or business objectives negatively.
Data Audit:
- Maintain a forensic audit repository of changes to key data fields, access to key data fields, or change of system configurations and controls that protect those data assets.
Compliance Reporting:
- Compliance is a by-product of effective controls. A solution must produce evidence that effective control is being maintained.

These are the core pillars of a solution to the privilege insider problem.

Leave a Reply

Additional articles

Integrating Least Privilege and Password Management to Solve Account Security Challenges

Integrating Least Privilege and Password Management to Solve Account Security Challenges

Posted July 24, 2014    Morey Haber

There is a reason all BeyondTrust Privileged Account Management (PAM) solutions share the PowerBroker name: They all inherently enable you to reduce user-based risk and can be integrated under a centralized IT risk management platform. Here’s one common use case that demonstrates how this integration changes the playing field. Consider the challenge of privileged access:…

Tags:
, , , , ,
PowerBroker Password Safe Password Age Report

Reshaping Privileged Password Management with Password Safe 5.2

Posted July 21, 2014    Martin Cannard

Today, we’re pleased to unveil the latest edition of our privileged password management solution, PowerBroker Password Safe. I’ll start with a brief intro of what’s new and then tell you a little about the driving factors behind Password Safe development. New features for mitigating password risk and ensuring accountability enterprise-wide Here’s the 10,000-foot overview of…

Tags:
, , ,
PowerBroker for Windows tamper protection

PowerBroker for Windows 6.6 Tamper Protection

Posted July 18, 2014    Morey Haber

I have a bone to pick: Stopping an administrator from performing an action on a system is futile endeavor. As an administrator, there is always a way to circumvent a solution’s from tampered protection. Really! By default, Windows administrators have unrestricted access to the system – and even though an application, hardened configuration, or group policy…

Tags:
, ,