Is Your Administrator Trustworthy? Question to a CISO

Who is an Administrator? 

Every computer has an administrator by default – this admin is the one who enjoys privileges as they possess the authority to perform specific tasks.  

Only an admin can exercise tasks such as installing software, configuring the operating systems, establishing security policies, maintaining, and managing user account passwords, and all other management tasks associated with keeping a computer up and running. This essentially makes the administrator a person with absolute power. 

Just like we have heard in Spiderman – “With great power comes great responsibility”, even in a real-world professional setting, this adage is no alien. Admins have unparalleled power, meaning they have an excellent level of responsibility. However, imagine the plight if an admin misuses their privileges to install bogus software, modify the security policies, or change permissions on the system. 

The Role of a CISO from the Administrators’ Context 

Now, the role of a CISO entails managing the risks to the confidentiality, integrity and availability of the organization’s intellectual property and information technology assets.  

Given the nature of an administrator’s function and the nature of cyber-attacks lurking around, the most crucial question for CISOs is whether the admins protecting these critical IT assets are trustworthy. The reason is that most of the attacks today are caused by compromised admin accounts. 

The most recent hack to have occurred is that of Equifax, where personally identifiable information of over 145 million Americans was stolen(as per reports). However, the main culprits for the hacks have been identified as malicious insiders, accidental insiders and compromised accounts – as per reports.  

Linking this to the absolute authority and privileges that admins enjoy, it is evident that hackers see administrator accounts as the most effective way of hitting where it hurts. 

How to Eliminate Administrator Perceived Security Risks? 

Needless to say, you must stay two steps ahead of cyber-attackers. Have you done a thorough background check of your admins? Most of you might already have. So, what else can be done to mitigate such a situation in the future? This is where information security solutions like Privileged Access Management (PAM) play an essential role.  

PAM solutions are designed to ensure that a cyber security solution sits above in control of the administrators and not the other way around. Admin access is wholly managed and monitored through Privileged Access Management solutions, and admin rights can be granted on a ‘need-to-know, need-to-do basis. 

If you already have a PAM solution, you are on the right path – ensure that the solution is being audited and tested for vulnerabilities. It is best practice to do so and to test the solution once every quarter thoroughly.  

If you haven’t installed a PAM solution, now is the time for you to consider prioritizing your privileged access security goals. In addition to everything, regulations have become stringent around this, and it is better to act now than be sorry tomorrow. 

Sectona Provides a Solution that Can Help You Secure Administrator Access 

Take a look at what a PAM solution is and what it is capable of doing in this link   

Read our whitepaper on Simpler, Faster & Complete Password Management to learn more about effective ways to protect passwords and ensure secure access mechanisms.