{"id":2324,"date":"2015-08-01T11:03:43","date_gmt":"2015-08-01T11:03:43","guid":{"rendered":"https:\/\/arconnet.com\/?p=1017"},"modified":"2026-03-27T16:37:06","modified_gmt":"2026-03-27T11:07:06","slug":"big-hole-in-identity-management","status":"publish","type":"post","link":"https:\/\/arcon.xyz\/staging01\/big-hole-in-identity-management\/","title":{"rendered":"BIG hole in Identity Management"},"content":{"rendered":"

Summary<\/em><\/strong> : Millions have been invested in securing the periphery, however little or no investment is made in securing the access to the core of any system i.e. Privileged Identities<\/p>\n

A BIG hole in Identity Management<\/strong>
\nThe last decade has seen several debates on Identity Management and the best possible ways to address the growing disconnect in the much interconnected world. While there has been substantial efforts in managing the identities of an organization either with manual processes or recently by implementing IDM technologies, there has been a glaring hole in the approach as most of the identity management solutions are not able to address the challenges posed by privileged accounts.<\/p>\n

Privileged accounts such as those of the administrators, allow users to log on and control systems\/applications and have unrestricted access to view, alter or extract data\/information on those systems. Most organizations have multiple workstations, servers, routers, databases, scripts and applications that require administrative privileges. There are scenarios, where-in many organizations have hundreds or even thousands of privileged accounts and passwords, interestingly in most of the cases, the number of these accounts are more than the end-user accounts. This is further made complex as the passwords of these accounts are mostly shared amongst the limited technical support staff.<\/p>\n

If one were to look at the recent security breaches, wherein systems have been hacked and data has been compromised or modified for example: money balance in accounts (saving accounts, debit cards etc). It is abundantly clear that all external\/ internal attackers eventually try to acquire access to the privileged accounts. The risk categorization is HIGH, typically for any industry which has business sensitive data and\/or customer information.<\/p>\n

Insider threat being the biggest challenge, regulators across the world are now demanding granular access controls on the privileged accounts with comprehensive tamper proof logs. References can be found in various standards\/guidances. This is pushing beyond the outer boundaries of many existing privilege identity solutions\/ technologies, which have only session recording capabilities.<\/p>\n

The selection of such evolving technologies is generally a challenge and more so in the case of technologies which encompass the entire IT ecosystem. The critical components of a PAM solution that one needs to carefully assess includes the following:<\/p>\n