CyberArk > 实例探究 > PeerStory: CyberArk Endpoint Privilege Manager

PeerStory: CyberArk Endpoint Privilege Manager

产品

CyberArk Endpoint Privilege Manager

技术栈

Endpoint Security
Privilege Management

实施规模

Enterprise-wide Deployment

影响指标

Cost Savings
Customer Satisfaction
Productivity Improvements

技术

网络安全和隐私 - 端点安全
网络安全和隐私 - 身份认证管理

适用行业

Professional Service
Software

适用功能

商业运营

服务

系统集成
培训

关于客户

The customer is an organization that places a high priority on IT security and risk management. They have a dedicated Security Operations Center (SOC) and are focused on reducing the attack surface within their IT environment. The organization values solutions that not only enhance security but also improve operational efficiency. They have a structured approach to managing administrative access and are keen on implementing policies that limit the number of local administrative accounts. The customer is also interested in solutions that can elevate their IT security personnel's profile within the industry.

登录后查看完整内容

挑战

The organization faced significant risks related to endpoint security, particularly concerning the potential for pass-the-hash attacks and same-account harvesting. The challenge was to reduce the attack surface by removing local administrative rights on workstations, which would minimize the chance of privilege escalation. Additionally, the organization needed a solution that could provide immediate reporting to the Security Operations Center (SOC) in case of an incident. The goal was to enhance overall security while maintaining operational efficiency.

登录后查看完整内容

解决方案

The organization implemented CyberArk Endpoint Privilege Manager to address their endpoint security challenges. This tool significantly reduced the risk of pass-the-hash attacks and same-account harvesting by removing local admin credentials on endpoints. The solution also provided immediate reporting capabilities to alert the SOC in case of any incidents. By implementing strict policies, the organization was able to reduce the number of local administrative accounts by 98%, thereby drastically reducing the attack surface. The tool's ability to whitelist applications and automatically elevate privileges improved user efficiency by reducing the number of prompts they had to respond to. This not only enhanced security but also made day-to-day operations smoother for the end-users.

登录后查看完整内容

运营影响

The implementation of CyberArk Endpoint Privilege Manager has drastically reduced the attack surface for local administrative rights, minimizing the chance of privilege escalation.
The organization has successfully removed close to 98% of local administrative accounts on workstations, significantly enhancing security.
The tool's ability to whitelist applications and automatically elevate privileges has improved operational efficiency by reducing the number of prompts users have to respond to.
The solution has provided immediate reporting capabilities, allowing the SOC to be promptly alerted in case of any incidents.
The use of CyberArk Endpoint Privilege Manager has elevated the profile of the IT security personnel within the organization, providing them with more opportunities and recognition.

登录后查看完整内容

数量效益