{"id":2868,"date":"2018-05-21T13:00:32","date_gmt":"2018-05-21T17:00:32","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=2868"},"modified":"2018-07-20T14:11:48","modified_gmt":"2018-07-20T18:11:48","slug":"privileged-access-management-identity-hygiene","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/","title":{"rendered":"Privileged Access Management and Identity Hygiene"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-2422\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\" alt=\"privileged access management identity hygiene\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod-300x150.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod-768x384.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod-540x270.jpg 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod-162x81.jpg 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod-360x180.jpg 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">In cybersecurity we tend to think of<a href=\"https:\/\/solutionsreview.com\/identity-management\/centrify-gartner-best-practices-for-privileged-access-management\/\" target=\"_blank\" rel=\"noopener\"> privileged access management<\/a> (<a href=\"https:\/\/solutionsreview.com\/identity-management\/5-key-capabilities-consider-evaluating-privileged-access-management-pam-solutions\/\" target=\"_blank\" rel=\"noopener\">PAM<\/a>) and <a href=\"https:\/\/solutionsreview.com\/identity-management\/iam-solves-onboarding-offboarding-challenges\/\" target=\"_blank\" rel=\"noopener\">identity and access management<\/a> (IAM) as two separate fields. Sometimes, privileged access management is treated as if it is a branch off\u00a0of the identity management tree rather than as a fully fledged subsector of cybersecurity. From a certain perspective, this philosophy makes sense yet it can hamper your identity hygiene efforts. <\/span><\/p>\n<p style=\"text-align: justify\"><div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" alt=\"Download Link to Privileged Access Management Buyer's Guide\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Privileged access management can serve as a guiding principle for your <a href=\"https:\/\/solutionsreview.com\/identity-management\/4-tips-optimizing-your-identity-and-access-management\/\" target=\"_blank\" rel=\"noopener\">identity and access management<\/a> platforms, allowing for a <a href=\"https:\/\/solutionsreview.com\/identity-management\/cloud-identity-management-differ\/\" target=\"_blank\" rel=\"noopener\">top-down<\/a> approach that can improve your enterprise\u2019s identity hygiene and therefore create a more secure IT environment. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">What is identity hygiene? And how can <a href=\"https:\/\/solutionsreview.com\/identity-management\/centrify-gartner-best-practices-for-privileged-access-management\/\" target=\"_blank\" rel=\"noopener\">PAM<\/a> help specifically? Here&#8217;s what you need to know: <\/span><\/p>\n<h3 style=\"text-align: justify\"><b>By the Numbers: Privileged Access Management<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Before diving into identity hygiene best practices, we need to get a sense of the current state of enterprise-level privileged access management. Some key statistics include: <\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><b>81%<\/b><span style=\"font-weight: 400\"> of hacking-related data breaches utilize stolen or weak passwords, according to Identity Automation. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">The global average cost of a data breach is <\/span><b>$3.62<\/b> <b>million<\/b><span style=\"font-weight: 400\">. \u00a0<\/span><\/li>\n<li style=\"font-weight: 400\"><b>54%<\/b><span style=\"font-weight: 400\"> of enterprises still use paper or an Excel spreadsheet to store their privileged credentials. <\/span><\/li>\n<li style=\"font-weight: 400\"><b>44% <\/b><span style=\"font-weight: 400\">of data breaches involved privileged access credentials, according to <\/span><a href=\"https:\/\/globenewswire.com\/news-release\/2018\/05\/17\/1508089\/0\/en\/Forty-four-percent-of-data-breaches-in-the-last-year-involved-privileged-identity-according-to-global-Balabit-research-report.html\"><span style=\"font-weight: 400\">Balabit<\/span><\/a><span style=\"font-weight: 400\">. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Only <\/span><b>41% <\/b><span style=\"font-weight: 400\">of those privileged accounts are assigned to permanent internal employees. The majority are assigned to third-party actors. <\/span><\/li>\n<li style=\"font-weight: 400\"><b>71% <\/b><span style=\"font-weight: 400\">of enterprises stated the number of privileged accounts increased over the past year. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Only <\/span><b>48%<\/b><span style=\"font-weight: 400\"> of enterprises can account for all of their internal privileged access credentials, and only <\/span><b>44% <\/b><span style=\"font-weight: 400\">can account for third-party privileged access. <\/span><\/li>\n<\/ul>\n<h3 style=\"text-align: justify\"><b>PAM Facilitates Digital Identity Hygiene Best Practices<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Identity hygiene relates to how your enterprise handles the credentials of both internal and external actors: ensuring that the digital identities have access appropriate to their positions, that the users with those identities are who they say they are, and that both are monitored. Without adequate identity hygiene, the chances of an external hacker obtaining those credentials or an insider threat occurring increase substantially\u2014never a good thing. \u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Privileged access management\u2019s key capabilities can improve your enterprise\u2019s digital identity hygiene significantly by allowing for greater visibility into user credentials and granular control over them. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Those PAM key capabilities include: <\/span><\/p>\n<h4 style=\"text-align: justify\"><b>Administrative Control and Role Management <\/b><\/h4>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">One of the key benefits of privileged access management is the insight into your enterprise\u2019s IT environment via the high level of inherent administrative controls. For example, the different departments in your enterprise require privileged accounts for their leaders: the CEO will need privileged access, as will your IT director and CFO. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Yet each will need their own distinct privileged <a href=\"https:\/\/solutionsreview.com\/identity-management\/passwords-traditional-access-management-dead\/\" target=\"_blank\" rel=\"noopener\">credentials<\/a>: the CEO doesn\u2019t need the same permissions as the IT director. Giving block privileges to all privileged users asks for trouble: it opens the door to potential insider threats whether accidental or deliberate and makes these credentials prime target to external cybercriminals. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Privileged access management can help enforce identity hygiene best practices by delegating privileged permissions to individual roles rather than people. This will prevent permissions creep\u2014an individual continuing to gain privileges as they move through your enterprise\u2014which can increase the chances of an insider threat. Furthermore, the administrative controls offered by PAM allows for greater visibility into your permissions, including who has what access and when they are using it. Thus PAM allows your IT security team to make adjustments or revoke permissions if they see a discrepancy, improving your enterprise\u2019s overall identity hygiene. <\/span><\/p>\n<h4 style=\"text-align: justify\"><b>Removing Orphaned Privileged Accounts<\/b><\/h4>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">An orphaned account is an account that still exists in your enterprise\u2019s networks<\/span> <span style=\"font-weight: 400\">even though the user no longer works at your enterprise or no longer uses those credentials. For privileged access management, an orphaned account is a nightmare for security teams\u2014super credentials with no user to monitor their behavior or notice discrepancies lays out the welcome mat to hackers. They are identity hygiene disasters, the equivalent of ignoring a symptom of an illness. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Privileged access management solutions repair this damage by allowing IT security teams to evaluate the privileged accounts on your networks, find orphaned accounts, and remove them. It\u2019s certainly the easiest way to improve your identity hygiene. <\/span><\/p>\n<h4 style=\"text-align: justify\"><b>Employing The Least Permissions Principle<\/b><\/h4>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Related to the capabilities above, the principle of least privileges is a model in which each user on your network only has the permissions they absolutely need to perform their roles\u2014and no more. This means preventing permissions creep, as mentioned above, as well as revoking privileges that users don\u2019t need or setting temporary privileges for when a project requires it. \u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The principle of least permissions is a key component of identity hygiene, as it maintains tight control over privileges and permissions within\u00a0your network. That&#8217;s what privileged access management boils down to\u2014better control.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\">Identity hygiene is about tight control as well\u2014almost like a digital diet. It takes discipline and constant vigilance to do it properly, and the habits have to be maintained. Privileged access management can help you maintain that control.<\/p>\n<p style=\"text-align: justify\">Is it time for you to start your digital diet?<\/p>\n<p>For more information, you can download the <a href=\"https:\/\/solutionsreview.com\/identity-management\/centrify-gartner-best-practices-for-privileged-access-management\/\" target=\"_blank\" rel=\"noopener\">Gartner Best Practices for\u00a0Privileged Access Management Report<\/a> courtesy of Centrify.<\/p>\n<p style=\"text-align: justify\"><br \/>Widget not in any sidebars<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In cybersecurity we tend to think of privileged access management (PAM) and identity and access management (IAM) as two separate fields. Sometimes, privileged access management is treated as if it is a branch off\u00a0of the identity management tree rather than as a fully fledged subsector of cybersecurity. From a certain perspective, this philosophy makes sense [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":2422,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,16,76,759,124,91,123,90,25],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Privileged Access Management and Identity Hygiene<\/title>\n<meta name=\"description\" content=\"Privileged access management can serve as a guiding principle for a top-down approach that can improve your enterprise\u2019s identity hygiene.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/\",\"name\":\"Privileged Access Management and Identity Hygiene\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"datePublished\":\"2018-05-21T17:00:32+00:00\",\"dateModified\":\"2018-07-20T18:11:48+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Privileged access management can serve as a guiding principle for a top-down approach that can improve your enterprise\u2019s identity hygiene.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Findings: The Forrester Wave: Privileged Identity Management (PIM), Q4 2020\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privileged Access Management and Identity Hygiene\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privileged Access Management and Identity Hygiene","description":"Privileged access management can serve as a guiding principle for a top-down approach that can improve your enterprise\u2019s identity hygiene.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/","url":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/","name":"Privileged Access Management and Identity Hygiene","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","datePublished":"2018-05-21T17:00:32+00:00","dateModified":"2018-07-20T18:11:48+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Privileged access management can serve as a guiding principle for a top-down approach that can improve your enterprise\u2019s identity hygiene.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg","width":800,"height":400,"caption":"Findings: The Forrester Wave: Privileged Identity Management (PIM), Q4 2020"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/privileged-access-management-identity-hygiene\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Privileged Access Management and Identity Hygiene"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2868"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=2868"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2868\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2422"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=2868"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=2868"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=2868"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}