IBM Privileged Identity Manager V2.1 with Identity Governance and Intelligence V5.2.2 help improve privileged user governance.

Digital transformation, mobility, and rapidly evolving technologies lead to a more challenging and complex enterprise security landscape. Attackers continuously exploit security vulnerabilities and the exposure to insider threat grows exponentially. In response, security regulations get more demanding and require:

• Strict controls over privileged access
• Limited access to sensitive assets
• Ability to monitor every aspect of privileged user activity to show previous activity, in case of breach
• Detailed audit records to prove compliance to regulations

Organizations that fail security audits need to mitigate elevated security risks that are created by insider threat to implement centralized access enforcement and monitoring controls.

Least privilege enforcement across enterprise servers and databases is crucial to this mitigation. Also important is monitoring and recording what privileged users are doing with their access. Shared passwords and login credentials must be tightly managed, to prevent abuse or compromise. Anomalous behavior must be identified and security administrators alerted while there is still time to respond and potentially mitigate a malicious attack or remediate access-related vulnerability.

Privileged Identity Manager V2.1

Privileged Identity Manager helps mitigate the insider threat by centrally managing and auditing the use of privileged access credentials across systems, applications, and platforms. These capabilities, along with a holistic, security immune system approach, through integration with QRadar®, Identity Governance and Intelligence, and Guardium® can:

• Help better adhere to security regulations.
• Protect sensitive assets.
• Improve security posture.

Privileged Identity Manager V2.1 is updated to include:

• Privileged Session Gateway function supports agent-less access to shared credentials, in addition to agent-based and manual credential access to provide users greater flexibility in choosing privileged activity controls
• Additional integration with Identity Governance and Intelligence V5.2.2 to support access recertification of sensitive privileged user access
• Expanded browser support to include Chrome for web access and expanded Internet Explorer 11 support
• Additional access profiles for accelerated time to value

Identity Governance and Intelligence V5.2.2

Identity Governance and Intelligence provides the identity management and governance features needed to break the entitlement pain chain that leads to role proliferation. It enables information technology analysts to visually manage roles in a manner that can scale with increases in applications and complexity. Identity Governance and Intelligence empowers business managers to make appropriate approval and access certification decisions. Certification campaigns now incorporate Identity Governance and Intelligence, Privileged Identity Manager, and Security Identity Manager environments by using the business activities function to provide a bridge from technical roles and entitlements to business and auditor-defined functions. Identity Governance and Intelligence provides a complete Identity Management and governance solution to ensure enterprise user access remains compliant and secure.

Identity Governance and Intelligence V5.2.2 includes many deployment improvements that can reduce time to value, including work item notification and redirection and continued improvement of password management with the Desktop Password Reset Assistant (DPRA). Support of additional user attributes to make entitlement decisions replaces cumbersome, manual tasks with intelligence-based decision support processes.

Identity Governance and Intelligence V5.2.2 Enterprise and Lifecycle Editions include entitlement to Security Identity Manager V7.0. This allows existing Identity Manager clients to maintain legacy Identity Manager entitlements and transition to Identity Governance and Intelligence at a pace that fits their project goals.

Find out more here.