Watch this video to learn about Zero Standing Privilege (2:08)
Watch this video to learn about Zero Standing Privilege (2:08)
A banking customer sought to meet its cyber insurance carrier's new PAM-specific requirements within a tight timeframe. To accomplish this, the customer needed a strategy beyond using legacy PAM. A new, more evolved approach enabled the customer to quickly implement, fulfill their cyber insurance demands, and bolster cybersecurity resiliency.
The security team at a multi-state bank holding company that prides itself as a community bank had a pressing need to deploy a privilege solution with multi-factor authentication. The driving force for this was a new cyber insurance requirement. Efficacy and speed-to-deployment were of utmost importance but ease of use and limiting disruption were also vital.
While the customer’s security team was knowledgeable and effective at deploying solutions, they were only aware of legacy PAM approaches which normally take years to deploy, but still failed their noted requirements. Based on this, they were introduced to Remediant SecureONE by their trusted security partner.
The Remediant team deployed SecureONE in the span of six weeks, which is a rarity for an effort like this. While expedited, the rollout was methodical and iterative. Beginning with Freeze Mode, which stopped further privilege-creep and prevented exacerbation of privilege sprawl, the team moved to a full rollout and deployment without negatively impacting the customer’s ongoing business operations.
Subsequently, the customer’s team took full advantage of SecureONE’s integration with SentinelOne, a notable first in the PAM space. This capability enabled the security team to gain deep process-level insights of admin activities, allowing for a quicker investigation of suspected security incidents, and doing so without additional overhead. Instead of simply recording the session, SecureONE showed the team what a user (or attacker) actually executes during a privilege session.
With a Remediant PAM+ strategy, the customer was able to deliver the following outcomes:
Removed administrative accounts from all endpoints, eliminated privilege sprawl, and reduced privileged identity attack surface to zero. By virtue of ZSP, implicit trust to privileged users between endpoints is also eliminated thus preventing lateral movement.
With a full deployment in about six weeks, the time-to-value of SecureONE is substantially better than legacy PAM solutions.
Chief Security Officer
Multi-state Banking Institution
The key outcomes of the SecureONE deployment within the customer’s environment were as follows: