{"id":4827,"date":"2020-02-27T14:18:04","date_gmt":"2020-02-27T18:18:04","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4827"},"modified":"2020-02-27T14:18:04","modified_gmt":"2020-02-27T18:18:04","slug":"what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/","title":{"rendered":"What is Vendor Privileged Access Management (VPAM) And Why Does It Matter?"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-4381\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg\" alt=\"What is vendor privileged access management (VPAM)? Why does it matter to your business?\u00a0\" width=\"801\" height=\"413\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg 801w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod-300x155.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod-768x396.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod-800x412.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod-524x270.jpg 524w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod-157x81.jpg 157w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod-349x180.jpg 349w\" sizes=\"(max-width: 801px) 100vw, 801px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">What is vendor <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">privileged access management<\/a> (VPAM)? Why does it matter to your business?\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Privileged access represents the holy grail for both hackers and insider threats. Each superuser account can typically change, modify or eliminate workflows, processes, data, databases, and entire networks. Thus, if a privileged account ends up in the wrong hand, the consequences could prove disastrous. For example, the threat actor could steal finances, manipulate or steal data, or inflict costly downtime.<\/span><\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" alt=\"Download Link to Privileged Access Management Buyer's Guide\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Additionally, a data breach could damage your long-term reputation among both clients and customers. Most customers won\u2019t patronize businesses that can\u2019t (or don\u2019t appear to) protect their data adequately. Therefore, all privileged users need consistent monitoring and security protocols.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Thankfully, enterprises are beginning to wake up to the dangers of letting their privileged access users operate unchecked. Capabilities like multifactor authentication and continuous authentication help verify the users\u2019 identities at both the login stage and beyond. Moreover, the Principle of Least Privilege ensures superusers only possess the permissions they need to perform their functions; this prevents abuses if the credentials end up in the wrong hands.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">However, your enterprise needs to secure the privileges of more than just your employees. Instead, you need to secure your vendors and third-parties and their privileges. After all, these are a part of your network as well and deserve the same layer of identity management. Over half of all data breaches begin with third-parties.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Here\u2019s why vendor privileged access management matters.\u00a0<\/span><\/p>\n<h2 style=\"text-align: justify\"><b>Why Vendor Privileged Access Management Matters<\/b><\/h2>\n<h3 style=\"text-align: justify\"><b>The Risks of Third-Party Privileges<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The risks from granting vendors and third-parties privileged permissions prove numerous and dangerous. For the record, third-parties and vendors can include partners, clients, applications, and databases\u2014any user not directly employed by your business.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">First, because of their third-party status, vendors don\u2019t receive the same level of visibility as your other users. They can receive permissions and possibly accumulate more privileges without triggering investigations by your IT security team. Therefore, these accounts could become bloated through access creep, making them prime targets for hackers.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Second, vendors can often move laterally throughout your business network without activating monitoring capabilities. Thus, if a hacker hijacks a vendor privileged account, they could move through your network disguised as a legitimate user\u2014and reach their real target.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Finally, without some kind of vendor <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">privileged access management<\/a> (VPAM) solution, third-parties could escalate their privileges independently. This is a common tactic for hackers to give themselves the power they need to fulfill their goals.\u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>What VPAM Can Offer Your Business<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Vendor Privileged Access Management helps your business maintain visibility over your third-parties and their superuser accounts to ensure that their access level isn\u2019t being misused or abused. Obviously, this helps you keep track of all the changes, updates, and modifications being made to vendor accounts. Moreover, it helps you to limit the permissions each vendor possesses, limiting the damage their credentials could do in the wrong hands.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Additionally, VPAM solutions can help secure authentication and monitoring. The former ensures that only the vendor can use their login credentials; through the use of issued hard tokens and biometric authentication.\u00a0\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">On the other hand, monitoring comes in the form of privileged session management. This involves tracking activities that a vendor does on the system; it records login times, usernames, and IP addresses. Additionally, it records contextual data such as reasons for access, ticket numbers, and approval of access for vendors. Finally, vendor privileged access management uses granular access logs, with video captures, or keystrokes logs of vendor sessions.\u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>How to Learn More<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">To learn more about privileged access management for third-parties, check out our <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">Privileged Access Management Buyer\u2019s Guide<\/a>. We cover the key vendors and their capabilities in detail.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400\"><br \/>Widget not in any sidebars<br \/><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>What is vendor privileged access management (VPAM)? Why does it matter to your business?\u00a0 Privileged access represents the holy grail for both hackers and insider threats. Each superuser account can typically change, modify or eliminate workflows, processes, data, databases, and entire networks. Thus, if a privileged account ends up in the wrong hand, the consequences [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":4381,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,16,1204,76,425,124,123,90,25],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is Vendor Privileged Access Management (VPAM)?<\/title>\n<meta name=\"description\" content=\"What is vendor privileged access management (VPAM)? Why does it matter to your business?\u00a0We explore this unique challenge here.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/\",\"name\":\"What is Vendor Privileged Access Management (VPAM)?\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg\",\"datePublished\":\"2020-02-27T18:18:04+00:00\",\"dateModified\":\"2020-02-27T18:18:04+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"What is vendor privileged access management (VPAM)? Why does it matter to your business?\u00a0We explore this unique challenge here.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg\",\"width\":801,\"height\":413,\"caption\":\"Identity Management Providers: Best of 2021 and Beyond\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What is Vendor Privileged Access Management (VPAM) And Why Does It Matter?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What is Vendor Privileged Access Management (VPAM)?","description":"What is vendor privileged access management (VPAM)? Why does it matter to your business?\u00a0We explore this unique challenge here.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/","url":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/","name":"What is Vendor Privileged Access Management (VPAM)?","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg","datePublished":"2020-02-27T18:18:04+00:00","dateModified":"2020-02-27T18:18:04+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"What is vendor privileged access management (VPAM)? Why does it matter to your business?\u00a0We explore this unique challenge here.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg","width":801,"height":413,"caption":"Identity Management Providers: Best of 2021 and Beyond"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/what-is-vendor-privileged-access-management-vpam-and-why-does-it-matter\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"What is Vendor Privileged Access Management (VPAM) And Why Does It Matter?"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4827"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4827"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4827\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4381"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4827"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}