Privileged access refers to system permissions that allow overriding of controls and accessing sensitive information. Privileged accounts have special permissions that can significantly impact an organization's systems and databases. Proper management of privileged access is needed, including monitoring passwords, logging activity, and ensuring access is traceable to individual users. This is the goal of Privileged Access Management (PAM).

3. •
•
•
•
•
•

5. 










7. Privileged access: is defined as any feature or facility of
a multi-user information system that enables the user to
override system or application controls (e.g.
Administrator, Root, or similar high-level privileges)
Privileged accounts or identities hold special or extra
permissions within a system, application or database and
can significantly affect the organization’s business.
These accounts can grant broad access to underlying
business information in databases, grant “super user”
privileges, or can be used by authorized individuals when
elevated privileges are required to fix urgent problems.
The use of privileged accounts should be managed
and the password monitored when stored digitally.
Privileged account activity should be logged and
traceable to a unique user. This is the essence of
Privileged Access Management (PAM)

8. IDENTITY IS NOT THE NEW
PERIMETER
(HINT: THE PERIMETER IS GONE)
AUTHORIZED
Old Model New Reality

10. •
1
•
•

11. •
2
•
•
•
•
•
http://www.infosecurity-magazine.com/view/28973/insiders-
exploiting-privileged-accounts-likely-behind-saudi-aramco-attack-/

12. •
•
•

13. http://www.theguardian.com/technology/2014/jun/10/canadian-
teengers-hack-cash-machine-atm-montreal

14. •
•
100%
3
• THE
•
•
•

15. •
•
•
•
•
•
•

16. • Key takeaways….
• Make PAM part of your security DNA
• Ask questions about privileged
access when reviewing applications
& risk
• Educate & Engage business owners
when possible
Cleanup of current privileged
access in all environments
Define & run a new/modified
process to manage access
(Grant, revoke, manage exceptions. All aligned with policy)
Integrate the new model with Enterprise
IT Processes (ITIL, SDLC, DevOps, ITSM)

17. 17
Password
Vault
Session
Management &
Recording
PAM Policy
Management
Discovery &
Policy
Enforcement
Session Review
Privileged Access Management
SRM/Ticketing WorkflowPolicy Store
Logging & Audit
SIEM / Analytics
CMDB / Change
Management
Information Technology Resources
Access
Certification
Identity
Management
Non-person
Credential
Management
Identity &
Access
Management

19. •
•
•
•
•

20. •
•
•
•
•
•
•
•

21. •
•
•
•
•
•

23. •
•
•
POLICY
•
•
•
•
•
•
•

25. •
•
•
•
•
•
•
25

26. QUESTIONS?