That the effectiveness of a PAM tool is only as good as the organization\u2019s outline around its PAM practice was never so true as today. Indeed, while integrations and automation of PAM tasks remain at the core, managing people, and processes are important too. All the automation initiatives can be undermined without proper controls around people and processes.<\/p>\n
There is a sharp increase in the number of PAM use-cases and the complexities around those use-cases. There was a time when PAM implementation was the requirement for securing and controlling IT operations and infrastructure access environments. On-prem datacentre was the only perimeter to control privileged identities.<\/p>\n
But now with hybrid and remote work environments, multi-cloud platforms (IaaS, PaaS and SaaS), including privileged access for DevOps environments and non-human\u00a0identities\u2014the contexts are fast changing. And in many instances, new contexts are emerging as well.<\/p>\n
Resultantly, today\u2019s mid-scale and large organization have a higher number of privileged identities to manage. There are a higher number of PAM functional domains. As a result, there tends to be a greater number of roles and responsibilities. Consequently, it leads to an increasing number of users, user-groups, services and service groups.<\/p>\n
An evolved and mature PAM<\/span><\/u><\/a>, capable of supporting high-velocity PAM requirements can support these emerging and changing use-cases.<\/p>\n Under emerging contexts, the effectiveness, however, will also depend on how the users will be administered, and the rules enforced. In other words, a sloppy organization around people and policies can derail the entire PAM set-up.<\/p>\n Managing people and processes: The foremost requirement for a successful PAM implementation<\/b><\/strong><\/p>\n In any IAM environment that includes PAM, there is a set of basic dos and don\u2019ts. And implementation of this set of rules ensures stable and agile PAM environments. Correspondingly, non-implementation can lead to security loopholes<\/u><\/a><\/span>\u00a0and a data breach.<\/p>\n For instance, consider an on-prem datacentre. With the emergence of new use-cases as discussed above, enterprises have built micro-perimeters outside the traditional realm of a datacentre. The digital identities that were once segmented inside the on-prem datacentre are now micro-segmented to accomplish privileged tasks.<\/p>\n Against this backdrop, complete discovery of all privileged access along with mapping and tracking of all users and accounts is necessary for all organizations. There must be an unambiguous set of comprehensive governance policies that are well-defined, clearly itemized and enforceable.<\/p>\n The efficacy of PAM will never reach the desired level if:<\/b><\/strong><\/p>\n To secure and control privileged access, organizations must set up comprehensive policies around people and processes.<\/p>\n","protected":false},"excerpt":{"rendered":" That the effectiveness of a PAM tool is only as good as the organization\u2019s outline around its PAM practice was never so true as today. Indeed, while integrations and automation of PAM tasks remain at the core, managing people, and processes are important too. All the automation initiatives can be undermined without proper controls around […]<\/p>\n","protected":false},"author":40,"featured_media":47426,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"risk-categories":[],"class_list":["post-46808","risk-to-watch","type-risk-to-watch","status-publish","has-post-thumbnail","hentry"],"acf":{"blog_inner_page_contents":[{"acf_fc_layout":"hero_section","image":47426,"news_logo":"","publish_date":"","reading_time":"","heading":"","para":"","cta_text":"","cta_url":"","is_featured_post":false},{"acf_fc_layout":"page_contents","social_media_items":null,"sidebar_item_desktop":[{"id":"PAM implementation: The emerging contexts","item_name":"PAM implementation: The emerging contexts"},{"id":"Managing people and processes: The foremost requirement for a successful PAM implementation","item_name":"Managing people and processes: The foremost requirement for a successful PAM implementation"},{"id":"The bottom-line","item_name":"The bottom-line"}],"contents":[{"id":"","title":"","content":"That the effectiveness of a PAM tool is only as good as the organization\u2019s outline around its PAM practice was never so true as today. Indeed, while integrations and automation of PAM tasks remain at the core, managing people, and processes are important too. All the automation initiatives can be undermined without proper controls around people and processes."},{"id":"PAM implementation: The emerging contexts","title":"PAM implementation: The emerging contexts","content":"There is a sharp increase in the number of PAM use-cases and the complexities around those use-cases. There was a time when PAM implementation was the requirement for securing and controlling IT operations and infrastructure access environments. On-prem datacentre was the only perimeter to control privileged identities.\r\n\r\nBut now with hybrid and remote work environments, multi-cloud platforms (IaaS, PaaS and SaaS), including privileged access for DevOps environments and non-human\u00a0identities\u2014the contexts are fast changing. And in many instances, new contexts are emerging as well.\r\n\r\nResultantly, today\u2019s mid-scale and large organization have a higher number of privileged identities to manage. There are a higher number of PAM functional domains. As a result, there tends to be a greater number of roles and responsibilities. Consequently, it leads to an increasing number of users, user-groups, services and service groups.\r\n\r\nAn evolved and mature PAM<\/span><\/u><\/a>, capable of supporting high-velocity PAM requirements can support these emerging and changing use-cases.\r\n\r\nUnder emerging contexts, the effectiveness, however, will also depend on how the users will be administered, and the rules enforced. In other words, a sloppy organization around people and policies can derail the entire PAM set-up."},{"id":"Managing people and processes: The foremost requirement for a successful PAM implementation","title":"Managing people and processes: The foremost requirement for a successful PAM implementation","content":"In any IAM environment that includes PAM, there is a set of basic dos and don\u2019ts. And implementation of this set of rules ensures stable and agile PAM environments. Correspondingly, non-implementation can lead to security loopholes<\/u><\/a><\/span>\u00a0and a data breach.\r\n\r\nFor instance, consider an on-prem datacentre. With the emergence of new use-cases as discussed above, enterprises have built micro-perimeters outside the traditional realm of a datacentre. The digital identities that were once segmented inside the on-prem datacentre are now micro-segmented to accomplish privileged tasks.\r\n\r\nAgainst this backdrop, complete discovery of all privileged access along with mapping and tracking of all users and accounts is necessary for all organizations. There must be an unambiguous set of comprehensive governance policies that are well-defined, clearly itemized and enforceable.\r\n\r\nThe efficacy of PAM will never reach the desired level if:<\/b><\/strong>\r\n\n
The bottom-line <\/b><\/strong><\/h2>\n
\r\n \t