The information security battleground is quickly moving inside the network. Given that the majority of data breaches are now being caused by insiders, most organizations recognize the importance of privileged identity management. But what about third parties? Third parties such as contractors, business partners and vendors are an important part of any organization’s IT ecosystem today.

Managing Third-Party Risk

This ecosystem continues to grow in scale and importance day by day. It’s no wonder that growing numbers of nontraditional employees are accessing your organization’s network, system and data. According to Bomgar’s “2016 Vendor Vulnerability Index,” security professionals reported than an average of 89 vendors access their networks every week.

At the same time, there is a marked increase in data breaches attributed to third-party vendors. According to the Ponemon Institute report “Data Risk in the Third-Party Ecosystem,” 73 percent of respondents reported an increase in the number of cybersecurity incidents involving vendors.

The Importance of Privileged Identity Management

In many cases, third-party vendors may have privileged access to your systems. Privileged users are typically granted administrative rights to manage business-critical resources like operating systems, databases and enterprise resource planning (ERP) systems. If these IDs are not properly managed, they can cause accountability and compliance issues and increase the risk of a data breach.

The problem gets compounded when privileged IDs and passwords are shared across individuals. This anonymity makes it difficult to tie an action or security breach back to a specific individual, resulting in problems with regulatory compliance. It’s extremely important to monitor the activities of such accounts so that accountability can be established in case there are any issues.

A Single Pane of Glass

You need a solution that can help you centralize privileged identity management through a single pane of glass, if you will. The solution should be capable of extending privileged user management to contractors, outsourced IT and other service provider without diminishing speed or ease of use. It should eliminate the need to share passwords and provide a mechanism to record session activity for clear audit visibility into the activities of privileged users.

IBM Security Privileged Identity Manager (PIM) protects, automates and audits the use of privileged identities to help thwart insider threats and improve security across the extended enterprise. It is specifically designed to tackle the challenges associated with managing and monitoring privileged access of the ever-expanding user population without sacrificing ease of use and user productivity.

See You in Vegas!

The 2016 Gartner Identity & Access Management Summit will be held from Nov. 29 to Dec. 1 at Caesars Palace in Las Vegas. Stop by the IBM Security booth (#301) anytime, and we will be glad to talk to you about the challenges you face in managing privileged access for your organization and beyond.

More from

Bridging the 3.4 Million Workforce Gap in Cybersecurity

As new cybersecurity threats continue to loom, the industry is running short of workers to face them. The 2022 (ISC)2 Cybersecurity Workforce Study identified a 3.4 million worldwide cybersecurity worker gap; the total existing workforce is estimated at 4.7 million. Yet despite adding workers this past year, that gap continued to widen.Nearly 12,000 participants in that study felt that additional staff would have a hugely positive impact on their ability to perform their duties. More hires would boost proper risk…

The Evolution of Antivirus Software to Face Modern Threats

Over the years, endpoint security has evolved from primitive antivirus software to more sophisticated next-generation platforms employing advanced technology and better endpoint detection and response.  Because of the increased threat that modern cyberattacks pose, experts are exploring more elegant ways of keeping data safe from threats.Signature-Based Antivirus SoftwareSignature-based detection is the use of footprints to identify malware. All programs, applications, software and files have a digital footprint. Buried within their code, these digital footprints or signatures are unique to the respective…

How Do Threat Hunters Keep Organizations Safe?

Neil Wyler started his job amid an ongoing cyberattack. As a threat hunter, he helped his client discover that millions of records had been stolen over four months. Even though his client used sophisticated tools, its threat-hunting technology did not detect the attack because the transactions looked normal. But with Wyler’s expertise, he was able to realize that data was leaving the environment as well as entering the system. His efforts saved the company from suffering even more damage and…

The White House on Quantum Encryption and IoT Labels

A recent White House Fact Sheet outlined the current and future U.S. cybersecurity priorities. While most of the topics covered were in line with expectations, others drew more attention. The emphasis on critical infrastructure protection is clearly a top national priority. However, the plan is to create a labeling system for IoT devices, identifying the ones with the highest cybersecurity standards. Few expected that news. The topic of quantum-resistant encryption reveals that such concerns may become a reality sooner than…