{"id":2918,"date":"2018-06-18T11:52:09","date_gmt":"2018-06-18T15:52:09","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=2918"},"modified":"2018-06-18T11:52:09","modified_gmt":"2018-06-18T15:52:09","slug":"managing-third-party-privileges-identity-automation","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/","title":{"rendered":"Managing Third-Party Privileges with Identity Automation"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-2919\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png\" alt=\"third-party privileges Identity Automation\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod-300x150.png 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod-768x384.png 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod-540x270.png 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod-162x81.png 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod-360x180.png 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">In the already oft-neglected realm of privileged access management, one type of permissions is even more forgotten: <\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/identity-automation-minimize-identity-access-risks-associated-third-party-relationships\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">third-party privileges<\/span><\/a><span style=\"font-weight: 400\">. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Enterprises of every size and every industry are partnering with third-party vendors to fulfill the functions and roles they either do not have the personnel or the resources to do themselves. According to one study, 71% of enterprises are looking to increase their usage of third-party vendors by 20% or more. Yet the security risks in creating third-party privileges are evident: <\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">According to a separate analysis, 23% of businesses fail to monitor their remote vendor or third-party activity. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">According to another survey, 66% of enterprises said they suffered a data breach due to third-party privileges. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">A third expert report found that 56% of companies experienced a third-party privileges data breach\u00a0\u00a0<\/span><\/li>\n<\/ul>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" alt=\"Download Link to Privileged Access Management Buyer's Guide\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">To make sense of the issue, we turned to Texas-based privileged identity and access management solution provider <\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/identity-automation-minimize-identity-access-risks-associated-third-party-relationships\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Identity Automation<\/span><\/a><span style=\"font-weight: 400\">. In their report \u201cHow to Minimize the Identity and Access Risks Associated with Third-Party Relationships,\u201d their researchers found that 63% of enterprise breaches are the result of third-party privileges. Additionally, 94.3% of enterprises weren\u2019t confident in their tools for managing third-party privileges.<\/span><\/p>\n<p style=\"text-align: justify\"><b>Why Do Third-Party Privileges Get Abused?<\/b><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Identity Automation\u2019s findings confirm much of our own research on the perils inherent in third-party privileges: <\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">40% of enterprises never bother to look for all of the privileged accounts on their network. <\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">63% don\u2019t have security alerts in place for failed privileged access account login attempts.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Only 34% can identify specific threats stemming from their privileged access users.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Only 35% of enterprises have total visibility into the privileged accounts in their IT environment. <\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">This is important to remember because, as Identity Automation reminds us, third-party privileges can create a weak link in your network if it isn\u2019t paired with increased network visibility. By creating third-party privileges you tie your security with the external vendors\u2014and if they are weak, so are you. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Identity Automation points out that some of the biggest brands in the world\u2014Target, Home Depot, Wendy\u2019s, and Anthem\u2014all suffered breaches due to third-party privileges being stolen or abused. They further found that the average third-party data breach costs an enterprise $7.35 million. So stopping these breaches before they happen should be a top priority.<\/span><\/p>\n<p style=\"text-align: justify\"><b>Monitoring Third-Party Privileges <\/b><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Identity Automation provides several detailed suggestions on how to secure your third-party access, including: <\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Have a proper view of where your most sensitive data and who has access to it (aka monitoring).<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Assess the security of your vendors.<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">But above all, Identity Automation points out that legacy IAM and privileged access management solutions just don\u2019t have the capacity to monitor modern privileged accounts, let alone third-party access. If your enterprise is looking to expand its third-party vendor network as part of its scalability efforts, it may also be time to update your privileged access management solution and your third-party privileges monitoring. <\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">If you\u2019re interested in learning more about securing your third-party privileges, you should download the Identity Automation \u201c<\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/identity-automation-minimize-identity-access-risks-associated-third-party-relationships\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">How to Minimize the Identity and Access Risks Associated with Third-Party Relationships<\/span><\/a><span style=\"font-weight: 400\">\u201d available for free <\/span><a href=\"https:\/\/solutionsreview.com\/identity-management\/identity-automation-minimize-identity-access-risks-associated-third-party-relationships\/\"><span style=\"font-weight: 400\">here<\/span><\/a><span style=\"font-weight: 400\">. \u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><b>Other Resources: <\/b><\/p>\n<p style=\"text-align: justify\"><a href=\"https:\/\/solutionsreview.com\/identity-management\/thycotic-releases-2018-global-state-privileged-access-management-pam-risk-compliance\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Thycotic Releases \u201c2018 Global State of Privileged Access Management (PAM) Risk and Compliance\u201d<\/span><\/a><\/p>\n<p style=\"text-align: justify\"><a href=\"https:\/\/solutionsreview.com\/identity-management\/insider-threats-intellectual-property-risks-ruin\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Insider Threats, Intellectual Property, Risks and Ruin<\/span><\/a><\/p>\n<p style=\"text-align: justify\"><a href=\"https:\/\/solutionsreview.com\/identity-management\/key-findings-bomgar-2018-privileged-access-threat-report\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Key Findings from the Bomgar 2018 Privileged Access Threat Report<\/span><\/a><\/p>\n<p style=\"text-align: justify\"><a href=\"https:\/\/solutionsreview.com\/identity-management\/the-role-of-identity-in-digital-transformation\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">The Role of Identity in Digital Transformation<\/span><\/a><\/p>\n<p style=\"text-align: justify\"><a href=\"https:\/\/solutionsreview.com\/identity-management\/kurt-long-third-party-actors-insider-threats\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Kurt Long: Third-Party Bad Actors and Insider Threats<\/span><\/a><\/p>\n<p style=\"text-align: justify\"><a href=\"https:\/\/solutionsreview.com\/identity-management\/key-identity-access-management-findings-identity-automation-blog-q1-2018\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400\">Key Identity and Access Management Findings from the Identity Automation Blog Q1 2018<\/span><\/a><\/p>\n<br \/>Widget not in any sidebars<br \/>\n","protected":false},"excerpt":{"rendered":"<p>In the already oft-neglected realm of privileged access management, one type of permissions is even more forgotten: third-party privileges. Enterprises of every size and every industry are partnering with third-party vendors to fulfill the functions and roles they either do not have the personnel or the resources to do themselves. According to one study, 71% [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":2919,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[76,468,124,123,90,25,766],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Managing Third-Party Privileges with Identity Automation<\/title>\n<meta name=\"description\" content=\"We turned to Texas-based privileged identity and access management solution provider Identity Automation to make sense of third-party privileges.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/\",\"name\":\"Managing Third-Party Privileges with Identity Automation\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png\",\"datePublished\":\"2018-06-18T15:52:09+00:00\",\"dateModified\":\"2018-06-18T15:52:09+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"We turned to Texas-based privileged identity and access management solution provider Identity Automation to make sense of third-party privileges.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png\",\"width\":800,\"height\":400,\"caption\":\"Is Traditional Identity Management Still Enough for Enterprise Security?\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Managing Third-Party Privileges with Identity Automation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services\",\"description\":\"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Managing Third-Party Privileges with Identity Automation","description":"We turned to Texas-based privileged identity and access management solution provider Identity Automation to make sense of third-party privileges.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/","url":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/","name":"Managing Third-Party Privileges with Identity Automation","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png","datePublished":"2018-06-18T15:52:09+00:00","dateModified":"2018-06-18T15:52:09+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"We turned to Texas-based privileged identity and access management solution provider Identity Automation to make sense of third-party privileges.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/06\/security-analytics-mod.png","width":800,"height":400,"caption":"Is Traditional Identity Management Still Enough for Enterprise Security?"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/managing-third-party-privileges-identity-automation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Managing Third-Party Privileges with Identity Automation"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Best Identity Access Management (IAM) Software, Tools, Vendors, Solutions, &amp; Services","description":"Identity Access Management (IAM) News, Best Practices and Buyer&#039;s Guide","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2918"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=2918"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/2918\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2919"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=2918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=2918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=2918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}