Just-in-Time Elevation
Rights granted for a task and expiring automatically. The control with the largest effect on exposure, and the one administrators resist most.
Procedure
Access models
Removing standing rights is the intervention with the largest effect and the most resistance. Plus the gap most deployments leave open: the device the administrator is sitting at.
7 notes
Approval That Is Not Theatre
An approval always granted is a delay wearing a control's clothing. Designing one that carries information, and knowing when to skip it.
Analysis
Jump Hosts and Session Brokers
A single controlled path to administrative interfaces. What a bastion provides, what it does not, and why the traditional version is being replaced.
Reference
Third-Party and Vendor Access
External engineers with administrative rights, whose departure nobody tells you about. The category where controls fail most reliably.
Procedure
Where Administration Happens
A privileged session from a compromised laptop is a compromised privileged session. The dedicated-device control, and cheaper approximations.
Analysis
Access During an Incident
Controls designed for normal operation fail under incident conditions. Designing the emergency path in advance, rather than suspending everything.
Procedure
Removing Local Administrator Rights
The largest single reduction in exposure available, and the change users notice most. How to do it without generating a revolt.
Procedure