November 15, 2016 By Rahul Agarwal 2 min read

The information security battleground is quickly moving inside the network. Given that the majority of data breaches are now being caused by insiders, most organizations recognize the importance of privileged identity management. But what about third parties? Third parties such as contractors, business partners and vendors are an important part of any organization’s IT ecosystem today.

Managing Third-Party Risk

This ecosystem continues to grow in scale and importance day by day. It’s no wonder that growing numbers of nontraditional employees are accessing your organization’s network, system and data. According to Bomgar’s “2016 Vendor Vulnerability Index,” security professionals reported than an average of 89 vendors access their networks every week.

At the same time, there is a marked increase in data breaches attributed to third-party vendors. According to the Ponemon Institute report “Data Risk in the Third-Party Ecosystem,” 73 percent of respondents reported an increase in the number of cybersecurity incidents involving vendors.

The Importance of Privileged Identity Management

In many cases, third-party vendors may have privileged access to your systems. Privileged users are typically granted administrative rights to manage business-critical resources like operating systems, databases and enterprise resource planning (ERP) systems. If these IDs are not properly managed, they can cause accountability and compliance issues and increase the risk of a data breach.

The problem gets compounded when privileged IDs and passwords are shared across individuals. This anonymity makes it difficult to tie an action or security breach back to a specific individual, resulting in problems with regulatory compliance. It’s extremely important to monitor the activities of such accounts so that accountability can be established in case there are any issues.

A Single Pane of Glass

You need a solution that can help you centralize privileged identity management through a single pane of glass, if you will. The solution should be capable of extending privileged user management to contractors, outsourced IT and other service provider without diminishing speed or ease of use. It should eliminate the need to share passwords and provide a mechanism to record session activity for clear audit visibility into the activities of privileged users.

IBM Security Privileged Identity Manager (PIM) protects, automates and audits the use of privileged identities to help thwart insider threats and improve security across the extended enterprise. It is specifically designed to tackle the challenges associated with managing and monitoring privileged access of the ever-expanding user population without sacrificing ease of use and user productivity.

See You in Vegas!

The 2016 Gartner Identity & Access Management Summit will be held from Nov. 29 to Dec. 1 at Caesars Palace in Las Vegas. Stop by the IBM Security booth (#301) anytime, and we will be glad to talk to you about the challenges you face in managing privileged access for your organization and beyond.

More from

Protecting your digital assets from non-human identity attacks

4 min read - Untethered data accessibility and workflow automation are now foundational elements of most digital infrastructures. With the right applications and protocols in place, businesses no longer need to feel restricted by their lack of manpower or technical capabilities — machines are now filling those gaps.The use of non-human identities (NHIs) to power business-critical applications — especially those used in cloud computing environments or when facilitating service-to-service connections — has opened the doors for seamless operational efficiency. Unfortunately, these doors aren’t the…

Communication platforms play a major role in data breach risks

4 min read - Every online activity or task brings at least some level of cybersecurity risk, but some have more risk than others. Kiteworks Sensitive Content Communications Report found that this is especially true when it comes to using communication tools.When it comes to cybersecurity, communicating means more than just talking to another person; it includes any activity where you are transferring data from one point online to another. Companies use a wide range of different types of tools to communicate, including email,…

Research finds 56% increase in active ransomware groups

4 min read - Any good news is welcomed when evaluating cyber crime trends year-over-year. Over the last two years, IBM’s Threat Index Reports have provided some minor reprieve in this area by showing a gradual decline in the prevalence of ransomware attacks — now accounting for only 17% of all cybersecurity incidents compared to 21% in 2021. Unfortunately, it’s too early to know if this trendline will continue. A recent report released by Searchlight Cyber shows that there has been a 56% increase in…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today