Description

As organizations grow in size and complexity, the number of administrators accessing sensitive systems or data grows as well. Spreadsheets, sealed envelopes, printouts, sticky notes, and other old-fashioned ways of managing access and passwords on sensitive systems don’t scale, don’t provide sufficient levels of security, and don’t provide enough auditing details that today’s auditors require.

Yet organizations need to grant certain administrators privileged access to sensitive systems; administrators for Windows domain controllers, UNIX root, network devices, and databases are prime examples. Organizations must also make such access available in a cost-effective and timely fashion to enable system administrators to address production issues and perform regular maintenance activities.

     Domain of skills

NRGiC consultants have gained through experiences on similar projects, a certain maturity and effectiveness in the choice and implementation of such a solution.

NRGiC acts as an integrator and help the client throughout the project phase, from the choice of the solution to the integration in the information system.

References: Banque de France, Natixis, Société Générale

     The Benefits for customers

Increased security. Security for management of privileged passwords can safely communicate the passwords to those who need them and avoid losing the passwords on printed spreadsheets (sometimes companies were not even aware the passwords were lost).

Improved compliance. With a PUPM solution, extensive auditing of password checkouts, password changes, and verification of sensitive passwords is easy. Policies for password complexity and periodic password change can be painlessly implemented and enforced. As a result, fewer audit findings will be identified, reducing the cost of regulatory compliance.

Operational insight from auditing reports. Knowing who checked out a password and who is working on a mission-critical environment at a certain time will undoubtedly improve the stability of any environment.