Watch this video to learn about Zero Standing Privilege (2:08)
Watch this video to learn about Zero Standing Privilege (2:08)
The county sought to improve resilience against citizen service disruption, establish control over administrator access and lateral movement and finally modernize their security tool set. They chose Remediant SecureONE to deliver all three outcomes without adding FTE and impacting taxpayer burden.
The county had two key initiatives. The first initiative was to modernize of their security tool set in order to improve the security posture of their citizens’ data. The second initiative was to establish internal control around a shared local administrator account used for workstation support.
Specifically, the security team at the county had proactively identified a local administrator account with no password management that had standing privilege on 1800 endpoints (servers and workstations).
The team identified this a key initiative to reduce the risk of malicious actors compromising the account and “moving laterally” across the network. Both initiatives had to succeed without adding additional FTE.
Before coming across Remediant, the team implemented a process to perform a “administrator security” of each endpoint and came across three key challenges:
With Remediant SecureONE, the the county was able to deliver three key outcomes:
With SecureONE, the county can now enforce a strong password policy on local administrator accounts.
SecureONE’s Zero Standing Privilege (Protect) mode instantly revoked the administrator account across all 1800 endpoints.
Chief Technology Officer
County Government Center
The county was able to improve two key outcomes: