Author: Jane Edwards|| Date Published: September 3, 2019
Kevin Jermyn
Kevin Jermyn, regional manager of federal customer success at CyberArk (Nasdaq: CYBR), has said government agencies seeking to protect sensitive data from cyber attacks should come up with a program to control, monitor and oversee privileged access to critical assets.
œOne key component is the ability to restrict a hacker™s access as soon as an attack is detected without negatively affecting legitimate users™ abilities to meet their goals or missions, Jermyn wrote.
He suggested four steps agencies can implement to address risks related to external attackers and insider threats and the first is reducing the attack surface by minimizing user privileges.
The three other steps are centralizing access to critical infrastructure using a secure repository to store privileged credentials; controlling role-based access and segregating administrative duties to restrict the power of an account; and analyzing and monitoring privileged user™s behavior and activities. Jermyn also offered an advice for agencies to ensure privileged access security as they move to the cloud.
œAs agencies migrate to the cloud, it™s important to avoid creating technical debt by adopting the easiest option now with the intention of reworking it later to meet specific needs, he said. œThe better approach is to define a centralized structure from the beginning that incorporates best practices for managing privileged access.”
GreyNoise Intelligence has launched a command-and-control detection capability designed to give federal agencies earlier visibility into compromised infrastructure. GreyNoise’s new…
Textron Aviation Defense has been awarded a five-year, $150 million contract to provide sustaining engineering and program management, or SEPM, services…
Merlin, an aerospace and defense technology company, has appointed former PsiQuantum executive Mark Brunner as chief revenue officer. What Will Mark Brunner Oversee?…
Fortreum has acquired Kovr.AI, an AI-native cybersecurity compliance platform, to combine automated compliance capabilities with independent assessment services for federal…
