{"id":2421,"date":"2018-03-09T12:16:38","date_gmt":"2018-03-09T16:16:38","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=2421"},"modified":"2018-07-20T14:10:11","modified_gmt":"2018-07-20T18:10:11","slug":"5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/","title":{"rendered":"5 Key Capabilities To Consider When Evaluating Privileged Access Management (PAM) Solutions"},"content":{"rendered":"

\"PAM<\/p>\n

If employees and their digital identities are your <\/span>largest attack vector<\/span><\/a> as cybersecurity experts contend, then your privileged users are potentially the most glaring vulnerability in your enterprise. Hackers and malicious insiders know that privileged credentials are an easy and lucrative target, and that the loss or theft of those credentials can cause catastrophic damage. In fact, \u00a0<\/span>80% of security breaches<\/span><\/a> involve privileged credentials, according to Forrester Research. Moreover, because of their privileged status, it can take weeks if not months to even notice the breach\u2014by which time it may already <\/span>be too late<\/span><\/a>. \u00a0<\/span><\/p>\n

\t\t\t

\"IAM<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Therefore, enterprises deploy privileged access management solutions<\/a>, or PAM solutions, to manage the digital identities of their most empowered users. This is a far superior strategy to manually handling privileged digital identities. But what capabilities should these solutions have? What should be considered most when surveying PAM solutions for your enterprise? \u00a0<\/span><\/p>\n

In an excerpt from the <\/span>2018 Solutions Review Privileged Access Management Buyer\u2019s Guide<\/span><\/a>, we share the 5 key capabilities for evaluating PAM solutions: <\/span><\/p>\n

1. 2-Step or Multifactor Authentication <\/b><\/h4>\n

2-Step and Multifactor Authentication add an additional step (or factor) to the authentication process. Typically, the additional factor involves pairing something the user knows, such as username and password, with an action or something the user has, such as an SMS message to their phone, an email, or a hard token the user carries. It is imperative for small-to-midsized businesses (SMBs) and large enterprises to move past the username\/password paradigm which has dominated credentials security for years, as privileged passwords have proven increasingly easy to steal in recent years.<\/span><\/p>\n

2. Single Sign-On<\/b><\/h4>\n

Through this service tool, abbreviated SSO, users log onto a single platform that gives them automatic login access to multiple applications for a set period of time. This allows users to only present one set of credentials for multiple applications, rather than continually re-entering passwords or remembering multiple passwords. It is designed to eliminate certain kinds of passwords\u2014specifically, ones that are frequently used and easy to remember, and thus easy to steal.<\/span><\/p>\n

3. Role-Based Access Controls <\/b><\/h4>\n

PAM solutions will allow your enterprise to operate in a state of zero trust\u2014giving your employees just enough privileges to do their jobs effectively, ensuring limited damage if their credentials are abused. In addition, PAM solutions will often provide granular, role-based access controls that allow administrators to regulate permissions and entitlements based on a user\u2019s role. Additional privileges can often be granted via self-service requests, and can be approved or denied directly.<\/span><\/p>\n

4. Limit Lateral Access<\/b><\/h4>\n

PAM solutions can also limit the authority of users over their assigned systems and the commands they can enter into those systems. This prevents employees or hackers from escalating privileges without permission or move laterally within the network into systems they should not have control over. You can set policies and adjust them to accommodate job roles to determine the lateral movement capabilities of your employees.<\/span><\/p>\n

5. Monitoring Privilege Use<\/b><\/h4>\n

PAM solutions provide the capabilities to monitor, record, and audit privileged account activity on your network. This not only serves as a secondary layer of protection against insider threats and hackers, it often a crucial part of regulatory compliance protocols. These monitoring and recording capabilities allow IT administrators to review privileged activities in the event of an incident, and determining what actions occurred, allowing for a thorough and rapid response.<\/span><\/p>\n

To learn more about PAM solutions, check out the full 2018 Solutions Review Privileged Access Management Buyer\u2019s Guide, available for free <\/span>here.<\/span><\/a>\u00a0You can also read the Gartner Best Practices for Privileged Access Management Report here<\/a>.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

If employees and their digital identities are your largest attack vector as cybersecurity experts contend, then your privileged users are potentially the most glaring vulnerability in your enterprise. Hackers and malicious insiders know that privileged credentials are an easy and lucrative target, and that the loss or theft of those credentials can cause catastrophic damage. […]<\/p>\n","protected":false},"author":41,"featured_media":2422,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[669,16,124,668,91,90,25],"acf":[],"yoast_head":"\n5 Key Capabilities To Consider When Evaluating PAM Solutions<\/title>\n<meta name=\"description\" content=\"In an excerpt from the 2018 Solutions Review Privileged Access Management Buyer\u2019s Guide, we share the 5 key capabilities for evaluating PAM solutions.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/\",\"name\":\"5 Key Capabilities To Consider When Evaluating PAM Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"datePublished\":\"2018-03-09T16:16:38+00:00\",\"dateModified\":\"2018-07-20T18:10:11+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"In an excerpt from the 2018 Solutions Review Privileged Access Management Buyer\u2019s Guide, we share the 5 key capabilities for evaluating PAM solutions.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Findings: The Forrester Wave: Privileged Identity Management (PIM), Q4 2020\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"5 Key Capabilities To Consider When Evaluating Privileged Access Management (PAM) Solutions\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"5 Key Capabilities To Consider When Evaluating PAM Solutions","description":"In an excerpt from the 2018 Solutions Review Privileged Access Management Buyer\u2019s Guide, we share the 5 key capabilities for evaluating PAM solutions.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/","url":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/","name":"5 Key Capabilities To Consider When Evaluating PAM Solutions","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","datePublished":"2018-03-09T16:16:38+00:00","dateModified":"2018-07-20T18:10:11+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"In an excerpt from the 2018 Solutions Review Privileged Access Management Buyer\u2019s Guide, we share the 5 key capabilities for evaluating PAM solutions.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","width":800,"height":400,"caption":"Findings: The Forrester Wave: Privileged Identity Management (PIM), Q4 2020"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"5 Key Capabilities To Consider When Evaluating Privileged Access Management (PAM) Solutions"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2421"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=2421"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2421\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2422"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=2421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=2421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=2421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}