{"id":4857,"date":"2020-03-23T13:15:08","date_gmt":"2020-03-23T17:15:08","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4857"},"modified":"2020-03-24T16:16:19","modified_gmt":"2020-03-24T20:16:19","slug":"centrifys-advice-on-privileged-access-management-for-remote-administrators","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/","title":{"rendered":"Centrify\u2019s Advice on Privileged Access Management for Remote Administrators"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-4428\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod.jpg\" alt=\"Centrify\u2019s Advice on Privileged Access Management for Remote Administrators\" width=\"800\" height=\"400\" srcset=\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod.jpg 800w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod-300x150.jpg 300w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod-768x384.jpg 768w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod-540x270.jpg 540w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod-162x81.jpg 162w, https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod-360x180.jpg 360w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Given the times, that so many businesses need to consider remote administrators should not surprise anyone. However, has anyone considered the cybersecurity and identity management implications of remote administrators? What does it mean to have your most privileged users working from an environment outside the corporate security boundary? How can your enterprise protect their credentials from abuse?\u00a0<\/span><\/p>\n<div class=\"widget\"><div class=\"aside-card\">\t\t\t<div class=\"textwidget\"><p><a class=\"iam-inject\" href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft size-full wp-image-1682\" title=\"\" src=\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" alt=\"Download Link to Privileged Access Management Buyer's Guide\" width=\"800\" height=\"100\" \/><\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n<h2 style=\"text-align: justify\"><b>Advice from Nate Yocom of Centrify<\/b><\/h2>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">To find the answers to these critical questions, we spoke with Nate Yocom. He works as Chief Technology Officer of <a href=\"https:\/\/www.centrify.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Centrify<\/a>, a <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">privileged access management<\/a> provider. Here\u2019s what he shared:\u00a0\u00a0<\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Grant IT administrators secure, context-aware access to a controlled set of servers, network devices and Infrastructure-as-a-Service (IaaS).<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Enable outsourced IT without the need of including administrators in the Active Directory.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Control access to specific data centers and cloud-based resources without the increased risk of providing full VPN access.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Secure all administrative access with risk-aware, multi-factor authentication (MFA).<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Single secure access point for administrators to manage infrastructure using shared accounts or their own Active Directory account.<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Enable secure remote access to data center and cloud-based infrastructures for internal users, third-party vendors, and outsourced IT through a cloud service or on-premises deployment.<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">This is an incredibly significant topic as the coronavirus pandemic accelerates and traps many workers at home. Let\u2019s break down some of Yocom\u2019s advice, because he offers valuable insights in these confusing and troubling times.\u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Enforce the Principle of Least Privilege for Remote Administrators<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">The Principle of Least Privilege states that users should only have the privileges and permissions necessary to complete their jobs. In other words, if a user obtains permissions beyond their everyday workflows, your IT security team must revoke them immediately.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, the Principle of Least Privilege doubles as both common sense and cybersecurity mandate. However, enterprises still struggle to deploy and maintain this principle over time. In fact, plenty of factors can disrupt or impede the Principle of Least Privilege. These include:\u00a0<\/span><\/p>\n<ul style=\"text-align: justify\">\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">A temporary project or other short-term disruption (like a departing employee) requiring the granting of permissions to different users, and then those permissions lingering with them.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">The network scaling or changing rapidly, requiring the creation of new privileges without regulation or careful monitoring.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400\"><span style=\"font-weight: 400\">Run-of-the-mill complacency and neglect. The logic goes that you trust privileged users, so they should have more permissions to handle problems. By default, they receive new permissions.\u00a0\u00a0<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">With the coronavirus ravaging communications and workflows around the globe, enterprises face temptation; they feel circumstances permit them to let their privileged users obtain more control as they deal with other issues.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">However, this could lead them into a trap. The more powerful privileged users become, the more of a target they become for cyber threat actors. After all, with more permissions, the more damage hackers could do with stolen privileged accounts.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, enterprises need to follow Yocom\u2019s advice and limit remote administrators\u2019 access to data centers and cloud-based resources. This limits the damage these credentials can do during a security incident. Keep this in mind when planning out your cybersecurity strategy moving forward.\u00a0<\/span><\/p>\n<h3 style=\"text-align: justify\"><b>Multifactor Authentication for Remote Administrators<\/b><\/h3>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Your enterprise should take Yocom\u2019s advice about deploying multifactor authentication (MFA) for remote administrators to heart; you must ensure they can verify their users effectively.\u00a0\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">However, you should also do so for all of your employees, regardless of their administrator or remote status. Single-factor authentication, usually embodied in passwords, basically welcomes hackers in with open arms. The more factors your enterprise imposes between access request and access granted, the more secure your sensitive data.\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Therefore, you need to deploy as many authentication factors as possible, especially for your remote administrators who operate without direct oversight. Fortunately, many of these factors can operate without interrupting logins. Time of access request monitoring and geofencing are among the most prominent means of verifying identity without active inputs.<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Other MFA factors can include hard tokens (which can be users\u2019 mobile devices), biometrics, and SMS messaging. In other words, you can deploy MFA in a way that requires little from your employees but proves effective for cybersecurity.\u00a0\u00a0\u00a0<\/span><\/p>\n<p style=\"text-align: justify\"><span style=\"font-weight: 400\">Thanks to Nate Yocom of <a href=\"https:\/\/www.centrify.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Centrify<\/a> for his time and expertise. You can learn about <a href=\"https:\/\/solutionsreview.com\/identity-management\/get-a-free-privilieged-access-management-solutions-buyers-guide\/\" target=\"_blank\" rel=\"noopener noreferrer\">Privileged Access Management<\/a> in our Buyer\u2019s Guide. It is available for free download.\u00a0<\/span><\/p>\n<p><b><span style=\"font-weight: 400\"><br \/>Widget not in any sidebars<br \/><\/span>\u00a0<\/b><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Given the times, that so many businesses need to consider remote administrators should not surprise anyone. However, has anyone considered the cybersecurity and identity management implications of remote administrators? What does it mean to have your most privileged users working from an environment outside the corporate security boundary? How can your enterprise protect their credentials [&hellip;]<\/p>\n","protected":false},"author":41,"featured_media":4428,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,24,16,76,425,70,145,124,123,90,25,533,1402,1403],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v23.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Centrify on Privileged Access Management for Remote Administrators<\/title>\n<meta name=\"description\" content=\"Has anyone considered the cybersecurity and identity management implications of remote administrators? Nate Yocom of Centrify helps us explore.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/\",\"name\":\"Centrify on Privileged Access Management for Remote Administrators\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod.jpg\",\"datePublished\":\"2020-03-23T17:15:08+00:00\",\"dateModified\":\"2020-03-24T20:16:19+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"Has anyone considered the cybersecurity and identity management implications of remote administrators? Nate Yocom of Centrify helps us explore.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Identity Management and Zero Trust: What Security Means Now\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Centrify\u2019s Advice on Privileged Access Management for Remote Administrators\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Centrify on Privileged Access Management for Remote Administrators","description":"Has anyone considered the cybersecurity and identity management implications of remote administrators? Nate Yocom of Centrify helps us explore.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/","url":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/","name":"Centrify on Privileged Access Management for Remote Administrators","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod.jpg","datePublished":"2020-03-23T17:15:08+00:00","dateModified":"2020-03-24T20:16:19+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"Has anyone considered the cybersecurity and identity management implications of remote administrators? Nate Yocom of Centrify helps us explore.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/06\/ransomware-4-mod.jpg","width":800,"height":400,"caption":"Identity Management and Zero Trust: What Security Means Now"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/centrifys-advice-on-privileged-access-management-for-remote-administrators\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Centrify\u2019s Advice on Privileged Access Management for Remote Administrators"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance &amp; Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4857"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4857"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4857\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/4428"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4857"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4857"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}