Protecting Sensitive and Critical Financial Data with Privileged Access

©2018 BOMGAR CORPORATION ALL RIGHTS RESERVED WORLDWIDE 1
Protect Sensitive and
Critical Financial Data
with Privileged Access
Adam White l July 10, 2018

• Cyber Breaches and the Finance Industry
• Leading Attack Pathways
• Survey Findings: 2018 Privileged Access
Threat Report
• Regulatory Requirements - Access +
Credentials
• Privilege Access Management – A Solution
(include use cases)
• Demo
• Q&A
• Additional Resources
Agenda

• MONEY!
• Data, Data, Data
• Legacy security practices
• Legacy solutions
Why Financial
Organizations Are So
Attractive To Hackers

“Actor motives have historically been driven by financial gain,
followed by strategic advantage aka espionage. Just under 90% of
breaches fall into these two motives, with money once again
leading the charge.”
2018 Data Breach Investigations Report, Verizon

• Organizations are too trusting of insiders
and vendors
• The amount of sensitive data processed and
managed by financial institutions
• Cyber attacks today are more sophisticated
and well-funded given the increased value of
the compromised data on the black market
Risk Factors Affecting Financial
Cyber Security

A Matter of Trust
2018 Privileged Access Threat Report, Bomgar

A Matter of Trust

In the
News

In the News

Stolen credentials leading the way…
2018 Data Breach Investigations Report, Verizon

Cyber Breaches Show No Sign Of Slowing Down
• Targeted attacks on corporate IT networks have
increased in scale and public visibility
• Hacker objective = bypass perimeter security,
by stealing legitimate credentials to gain access
• Phishing tactics are increasingly sophisticated
and often involve social engineering

The privileged access
threat landscape is growing
with a higher risk of
enabling cyberattacks and
severe consequences
Gartner, “Architecting Privileged Access Management
for Cyber Defense, March 12, 2018
“ “

• The least privilege principle ensures a user account is provisioned with
minimum entitlements that are essential to perform its intended function
• Enforces general access control requirements across different environments
and platforms to eliminate unnecessary access for privileged users
Enforcing “Least Privilege” Reduces Attack Surface

• Solutions that manage privileged
access cannot compromise the
user experience
• Adoption success is directly
impacted by the product’s ability to
support privileged users in
completing their job tasks
But “Least Privilege” Must Also Be Productive

“We immediately saw that with Bomgar Privileged Access, we
could tighten our control over what privileged users could and
could not do, as well as audit their actions. It’s a far superior
approach than just giving them unrestricted VPN access.”
VP of IS&T, AMOCO Federal Credit Union

Case Study – AMOCO Federal Credit Union
• Eliminated use of VPN’s for
vendor access
• Gained Control of Privileged
Access
• Improved Productivity
• Enhanced Security

Support Users. Access Endpoints. Protect Credentials

Bomgar Remote Support
SUPPORT MORE
More devices, more platforms, more people, more locations. Provide
instant remote support to end-users on or off your network using
Windows, Mac, iOS, Android and more.
PROVIDE SUPERIOR SERVICE
Improve service levels and customer satisfaction with seamless,
high-quality remote support for every end-user.
SECURE YOUR BUSINESS
Securing in remote access tools is crucial in protecting your network
from threats and meeting compliance regulations.

Bomgar Privileged Access
PROTECT THE ACCESS
Enable role-based access to specific systems and define session
parameters, such as access timeframes, required approvals, and
permitted functions.
MANAGE ACTIVITY
Actively manage the ongoing operational use of network devices and
hardware on the network.
ANALYZE & AUDIT DATA
Understand what privileged users are actually doing within the
network and audit for misuse, while meeting audit trail requirements.

Bomgar Privileged Identity
SEAMLESSLY INJECT CREDENTIALS
When integrated with Bomgar Privileged Access of Remote
Support, users can directly inject credentials into end servers
and systems without exposing plain text passwords.
ROTATE & DISCOVER AT SCALE
Rotate privileged identities at scale- up to thousands per minute- and
easily randomize local account passwords while continuously
detecting systems, devices and accounts as they come on and off
the network.
MANAGE SERVICE ACCOUNTS
Automatically discover service accounts and their dependencies- both
clustered and individual services- to achieve optimal system uptime.

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK
✓Broker the connection

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK
✓Outbound connections

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK
✓Multifactor authentication

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK
✓Access to specific systems

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK
✓Application whitelist / blacklist
✓

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK
✓
✓Access timeframes

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK
✓
✓Access approval workflow

How Do You Secure
Privileged Users?
PRIVILEGED USER
CORPORATE NETWORK
✓
✓Full audit trail with video

Windows, Mac, Linux
SSH Telnet
iOS & Android Mobile
Amazon AWS
Microsoft Azure
Public Cloud
Private Cloud
VM Ware vSphere
Citrix XenServer
Microsoft Hyper-V
Traditional Systems
PCs, Servers etc.
Secure & Manage Access Across Hybrid
Environments

DEMO

But, Success Is Based On More Than
Features
“Usable Security”
• Is the product easy for
people to use?
• Does it make their jobs
easier, not harder?
Make “least privileged”
productive, not a
hindrance

• 2018 Privileged Access Threat
Report
• Bomgar Privileged Access
Management
• Seamless Credential Injection
• Bomgar Architecture for Secure
Access
• Bomgar Compliance Matrix
Additional Resources

Thank You

Questions?
Adam White l July 10, 2018
@Bomgar
#bomgarwebinar

Protecting Sensitive and Critical Financial Data with Privileged Access

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Protecting Sensitive and Critical Financial Data with Privileged Access

Similar to Protecting Sensitive and Critical Financial Data with Privileged Access (20)

Recently uploaded

Recently uploaded (20)

Protecting Sensitive and Critical Financial Data with Privileged Access