- PAM is an investment in terms of implementation. Excuses such as “it seems like too much work and a waste of money to put in place” tend to outweigh the many benefits of having that technology.
- Privileged users may not appreciate the increased visibility into their actions, and take it as a slight that increased monitoring will be put in place.
- Technology is not enough. If these accounts are being managed by individuals and not a formal system, they’re not more secure than those of regular internal users. PAM is only one part of the strategy; people and process are necessary too.
Our Advice
Critical Insight
- The time for ad hoc anything is over. Formal processes and solutions need to be in place. Not doing anything can be low cost, but you’re masking a great complication, which is high risk.
Impact and Result
- Short term: Being under more scrutiny may change the culture of admins, but helping them understand the value not only to the overall security of the organization, but to their workflow (e.g. increased efficiency, fewer accounts to manage), it will be easier for them to come around and accept the new processes.
- Long term: Efficiency will be more apparent with fewer help desk tickets, which subsequently means less end-user time wasted waiting for password resets, etc. This also results in cost savings. You’ll also experience increased security overall in the long term, thanks to increased visibility and better account management.
Member Testimonials
After each Info-Tech experience, we ask our members to quantify the real-time savings, monetary impact, and project improvements our research helped them achieve. See our top member experiences for this blueprint and what our clients have to say.
Client
Experience
Impact
$ Saved
Days Saved
AJIL Financial Services Company
Guided Implementation
9/10
N/A
N/A
Ferro Corporation
Guided Implementation
9/10
N/A
N/A
Sacramento Municipal Utility District (SMUD)
Guided Implementation
9/10
N/A
10
We appreciated the knowledgeable insight, and relaxed conversational nature of the meeting. Very valuable for us!
Canadian Institutes of Health
Guided Implementation
9/10
N/A
N/A