Dark Reading is part of the Informa Tech Division of Informa PLC
This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.
Latest Comment: The superior method of sandboxing called "sandcastling" involves having the user detonate the malware.
Special Report: Computing's New Normal, a Dark Reading PerspectiveThis special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Tweet This
17 Comments
User Rank: Strategist
8/3/2015 | 11:34:25 AM
So what's the difference between the vault and the synchronized password? Surely only one password is more of a risk than several (even if they are all placed in a handy vault for the bad guy to get a hold of)?
First of all the level of complexity for that one password can be higher because now your user has only one password to remember.
Secondly remediation when the password is revealed or hacked is SO much easier with a synchronized password - you simply change one password to clean all systems connected to your Password Manager.
Compare that with the SSO world where users have multiple passwords they then have to change inside the SSO setup in order to restore the security of their password access.
Finally - no matter what method you choose, stale access rights are the next thing on your agenda as you try and strengthen your defences - users won't tell you what they DON'T need, nor will application owners tell you who should no longer have access.
Neccessity is the mother of invention, convenience is the father.