![\"The](\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/03\/glowing-fingerprint-mod.jpg\")
<\/p>\n<\/p>\n
What are the five key privileged identity management capabilities necessary for modern enterprises? How can they improve both your cybersecurity and your workflows?\u00a0<\/span><\/p>\n According to privileged identity management provider Centrify, almost three-fourths of enterprise suffer a data breach due to compromised privileged identities. So embracing the key privileged identity management capability should radically improve your business\u2019 cybersecurity resilience.\u00a0<\/span><\/p>\n However, enterprises often fail to recognize or understand privileged access; in fact, as many as 26 percent of U.S IT decision-makers seem unclear on the definition of privileged access.\u00a0<\/span><\/p>\n Therefore, your enterprise may not know what key privileged identity management<\/a> capabilities you need. Knowing and deploying these capabilities through next-generation identity security can prove pivotal to your future success.<\/span><\/p>\n Here are our choices for the top five key privileged identity management capabilities\u00a0<\/span><\/p>\n Before we go over the capabilities, we want to acknowledge two important factors in privileged identity management. Neither exists as an explicit capability per se; instead, they inform the effectiveness of these capabilities and their evolution in the context of the threat landscape.\u00a0<\/span><\/p>\n First, your privileged access policies and capabilities must follow the Principle of Least Privilege. This states that your users should only possess the permissions they need to perform their normal job functions\u2014and no more. Any additional privilege above base need constitutes a security risk under this Principle. Indeed, hackers and insider threats can both exploit unwarranted permissions to conduct their attacks.\u00a0\u00a0<\/span><\/p>\n Therefore, your privileged identity management<\/a> needs to enforce this Principle of Least Privilege. Fortunately, they can do this through several capabilities including provisioning, governance, and increased visibility. Governance, in particular, can help deal with temporary permissions which can often befuddle IT security teams.\u00a0<\/span><\/p>\n Second, privileged identity management capabilities help to remove the need for manual processes. Even as enterprise networks scale, some IT security teams insist on trying to manage permissions via a spreadsheet. Obviously, this fails to work\u2014too many users need temporary privileges and new access at one time to keep up with manually.\u00a0<\/span><\/p>\n Thankfully, next-generation privileged identity management almost always provides automation. Automating behavioral investigations, Just-in-Time access, and authentication can free up your IT workflows and facilitate other business processes.\u00a0<\/span><\/p>\n With these two necessities firmly established…<\/span><\/p>\n Previously, the editors of Solutions Review noted passwords carry with them several weaknesses. Notably, these include being easy to guess, being easy to crack, being easy to phish, and being constantly repeated. In fact, the latter contributes to a cascading effect, as repeated passwords allow hackers into multiple servers, databases, and networks.\u00a0<\/span><\/p>\n Therefore, building more authentication around passwords must become a key consideration. While enterprises may never truly rid themselves of passwords, they can supplement and strengthen them. Each authentication factor between the user and the database represents another hurdle to hackers. Hence the power of multifactor authentication (MFA).<\/span><\/p>\n Of course, with time and resources, hackers can subvert or bypass any number of authentication factors. However, most hackers would prefer to target weaker enterprises for a faster profit. So multifactor authentication can deter as many hackers as it deflects.\u00a0<\/span><\/p>\n Multifactor authentication can include passwords, hard tokens, geofencing, time of access monitoring, and behavioral analysis. The last of these proves especially important; it allows your cybersecurity to conduct continuous authentication even after the initial log-in.\u00a0<\/span><\/p>\n Of course, this sounds like another of the key identity management capabilities…<\/span><\/p>\n Session management offers your IT security team the ability to monitor and record privileged sessions. Thus you give them a better window for auditing and investigating cybersecurity incidents. In other words, it helps you exhibit control over your privileged identities.\u00a0<\/span><\/p>\n Sophisticated, next-generation privileged session management should enable you to observe the date, time, and location of each session. In fact, you should have visibility over their very keystrokes to ensure the authenticity of each privileged user. This can prevent insider threats and hackers alike by making sure users use their permissions according to business processes.\u00a0\u00a0<\/span><\/p>\n As a side note, if you users share credentials or accounts, then a secondary authentication factor may become necessary. This ties it into behavioral analysis even more deeply.\u00a0\u00a0<\/span><\/p>\n Many privileged identities can vanish from your monitoring. This can occur due to scaling networks or poor offboarding. Additionally, temporary permission may not be revoked after a prompt timeline, leaving users with privileged identities but no oversight.\u00a0<\/span><\/p>\n Many unmonitored privileged identities become orphaned accounts and thus security vulnerabilities. This proves another side effect of manually managing privileged identities; trying to keep track of everything in a spreadsheet is doomed to failure. According to Thycotic, 70 percent of enterprises fail to discover all of the privileged access accounts in their networks.<\/span><\/p>\n Moreover, 40 percent never attempt to look for all their privileged accounts.\u00a0<\/span><\/p>\n\t\t\t![\"Download](\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" "\\"\\"")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\nA Quick Note on the Key Privileged Identity Management Capabilities <\/b>\u00a0 \u00a0 \u00a0\u00a0<\/span><\/h2>\n
The Five Key Privileged Identity Management Capabilities\u00a0<\/b><\/h2>\n
1. Multifactor Authentication\u00a0<\/b><\/h3>\n
2. Privileged Session Management\u00a0<\/b><\/h3>\n
3. Privileged Identity Discovery\u00a0<\/b><\/h3>\n