Finding the Privileged Accounts
Every organisation finds several times more than it expected. Where to look, in what order, and what each source misses.
Procedure
Finding what exists
Every organisation finds several times more than it expected. The account list is the beginning; what matters is who can become an administrator, which is a graph rather than a list.
6 notes
Service Accounts
Non-human accounts outnumber human ones, hold broader rights, and never change their passwords. The hardest part of any PAM programme.
Analysis
Mapping Privilege Paths
The account list is the beginning. What matters is who can become an administrator, which is a graph rather than a list.
Analysis
SSH Keys and Distributed Trust
Keys are credentials with no central record, no expiry and no rotation. Most estates have far more authorised keys than they can account for.
Procedure
Cloud Entitlements
Cloud permission models are enormous, granted broadly and used narrowly. Where standing privilege now concentrates, and how to reduce it.
Analysis
Keeping the Inventory Current
A privileged account inventory decays within a quarter. What to automate, what to review, and the fields that make it useful.
Procedure