7 Ways To Lock Down Your Privileged Accounts
Admin passwords contained within privileged accounts can open up the keys to the kingdom to determined attackers. Here's how to stop them.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt46c9ad575f66f946/64f0da6c5694090f688492bb/Slide-1-PAM-Cover-Art.jpg?width=700&auto=webp&quality=80&disable=upscale)
Just what are privileged accounts and why are they so important?
Privileged accounts contain all the credentials that an organization has for all the devices that operate in the data center and across the enterprise. This includes passwords for the operating systems, databases, applications, and all networking gear such as routers and switches.
So in short, passwords to your privilege accounts open up the keys to the kingdom.
In a new PAM report released by privileged account management vendor Thycotic, the company found that while 80 percent of those surveyed consider PAM a high priority, some 52 percent received a failing grade in how they are securing privileged accounts.
Steve Kahan, a senior vice president at Thycotic, adds that security managers need to focus in on PAM because the Verizon Data Breach Investigations Report found that 63 percent of breaches involve weak, default or stolen passwords.
Kahan also pointed out some other highlights of the new PAM report:
20% of respondents say they never change the default password.
30% allow sharing of passwords.
70% don’t require approval for the creation of privileged account passwords.
50% don’t audit privileged account activities.
“When you look at some of this data it is mindblowing,” says Kahan. “While security managers still need to deploy tools such as firewalls, instruction detection and protection and vulnerability assessment, they also need to start thinking about reducing the exposure of their privileged accounts.”
The following seven slides offer security managers some insight into getting a better grip on managing privileged accounts.
The PAM survey points out that while the vast majority of organizations deploy firewalls, only 10% have automated PAM solutions. According to the report, six out of 10 organizations use manual methods such as spreadsheets and lists to keep track of privileged account passwords. Learn the top five tasks organizations can automate by using this free eBook (Registration required.)
Use a least privileged access strategy for account access. Too many companies grant access to sys admins (and even users) to everything, and if only one of these accounts gets compromised, attackers can use it to exploit your entire enterprise. By limiting access in a more detailed fashion you can reduce your potential exposure.
By taking this survey (Registration required), your organization receives a score and can find out how it is doing compared to other organizations.
Use this free security policy template that helps security managers develop PAM policies around generally accepted industry best practices.
Use this free security policy template that helps security managers develop PAM policies around generally accepted industry best practices.
Just what are privileged accounts and why are they so important?
Privileged accounts contain all the credentials that an organization has for all the devices that operate in the data center and across the enterprise. This includes passwords for the operating systems, databases, applications, and all networking gear such as routers and switches.
So in short, passwords to your privilege accounts open up the keys to the kingdom.
In a new PAM report released by privileged account management vendor Thycotic, the company found that while 80 percent of those surveyed consider PAM a high priority, some 52 percent received a failing grade in how they are securing privileged accounts.
Steve Kahan, a senior vice president at Thycotic, adds that security managers need to focus in on PAM because the Verizon Data Breach Investigations Report found that 63 percent of breaches involve weak, default or stolen passwords.
Kahan also pointed out some other highlights of the new PAM report:
20% of respondents say they never change the default password.
30% allow sharing of passwords.
70% don’t require approval for the creation of privileged account passwords.
50% don’t audit privileged account activities.
“When you look at some of this data it is mindblowing,” says Kahan. “While security managers still need to deploy tools such as firewalls, instruction detection and protection and vulnerability assessment, they also need to start thinking about reducing the exposure of their privileged accounts.”
The following seven slides offer security managers some insight into getting a better grip on managing privileged accounts.
About the Author(s)
You May Also Like
CISO Perspectives: How to make AI an Accelerator, Not a Blocker
August 20, 2024Securing Your Cloud Assets
August 27, 2024