Privileged identity management: securing the enterprise

Abstract

Within the context of identity and access management, privilege is generally understood in terms of controlling users who have high levels of authorisation to access, and control over, corporate IT systems, information assets and applications. In that important but somewhat narrow context, poor control over privileged user accounts is an all-too-common source of risk, both from a security and a compliance perspective. As outsourcing and the various instantiations of cloud-based services become increasingly essential to business operations, enterprises need to find ways to exercise governance over their critical assets and operations by extending control over privilege, both internally and externally, says Shlomi Dinoor of Cyber-Ark Software. Do Amazon and Google get privilege? If you rely on a public cloud provider to manage highly sensitive applications, it's a question worth asking. Within the context of identity and access management, privilege is generally understood in terms of controlling users who have high levels of authorisation to access, and control over, corporate IT systems, information assets and applications. In that important but somewhat narrow context, poor control over privileged user accounts is an all-too-common source of risk, both from a security and a compliance perspective.