Tech Talk: Governing your Privileged Users – A Key Step Towards Reducing the Risk of Breach

1. World®
’16
Tech Talk: Governing Your Privileged Users – A
Key Step Towards Reducing the Risk of Breach
Ehud Amiri – Product Management – CA Technologies
SCT38T
SECURITY

2. 2 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
© 2016 CA. All rights reserved. All trademarks referenced herein belong to their respective companies.
The content provided in this CA World 2016 presentation is intended for informational purposes only and does not form any type of
warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA.
For Informational Purposes Only
Terms of this Presentation

3. 3 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Abstract
Many organizations have a solution to control the actions of privileged users. But, that’s not
enough for a complete privileged user management solution – you must also govern their access
to make sure that only the correct users have elevated privileges, and they have only the
privileges that they need. This Tech Talk is an overview of the Pre-Con Ed in-depth session on
Privileged User Governance. Come here to learn how you can reduce your risk through this
capability that is unique to CA.
Ehud
Amiri
CA Technologies
Product Management

4. 4 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
One Stop Shop for all Identity Services
Everything the Business User Needs in One Place

5. 5 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Why Privileged Access Governance is Needed?
§ The Situation Today
– Privileged Access Management (PAM) is mostly a standalone solution that implements critical
security and compliance controls managing and monitoring use of sensitive access
– In most cases it is separated from the corporate Identity Management
§ The outcome
– Lack of overall visibility to “who has access to what”
– Missing approval and auditing information for “why access was granted”
– Inability to enforce consistent identity policies such as Segregation Of Duties
– Lack of risk analysis for the overall user access
– Fragmented compliance with regulatory requirements such as ISO27002 sections 8.1.2 “ownership of
assets” and 9.2.5 “review of access rights”

6. 6 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Privileged Access Governance
§ The CA Approach
– Providing governance for Privileged Access is critical
– Governance should be consistent across privileged
access and non-privileged access
– As always, it’s all about the user experience!
§ The CA Identity Suite Solution
– Automated provisioning and de-provisioning
– Access request
– Access certification
CA Identity Suite Integration with CA Privileged Access Manager

7. 7 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Automated Provisioning and De-Provisioning
§ Automate on-boarding and off-boarding of PAM
Accounts as part of regular user lifecycle
§ Out of the box CA Identity Suite connector for
CA PAM using standard PAM APIs
§ Manage PAM Accounts and their assignments to
Roles, User Groups, Devices & Device Groups
§ Support for local accounts and LDAP/AD
accounts
§ Support for granular access assignments
including start/end date, role scoping and device
policies
Integration with CA Privileged Access Manager

8. 8 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Access Certification
§ Gain visibility into all user access in a centralized
place
§ Granular insight into CA PAM accounts, roles,
groups & devices
§ Out of the box CA PAM certification processes:
– PAM user certification
– PAM device certification
§ Easily identify users with excessive access
§ Fulfillment using the connector for CA PAM
Integration with CA Privileged Access Manager

9. 9 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Access Request
§ Easy-to-use access request for CA PAM
permissions through an intuitive 'Shopping Cart‘
experience
§ Real-time risk analysis of a combined privileged
and non-privileged access
§ All requests can be checked for segregation of
duties compliance
§ Business description, workflow, localization,
recommendations, etc.
§ Fulfillment using the connector for CA PAM
Integration with CA Privileged Access Manager

10. 10 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Why Now and Why CA for Privileged Access Governance?
§ Compliance
– Many organizations are facing compliance pressure to ensure proper privileged access governance is
implemented
§ Better Security
– Managing and governing “who has access and why” for privileged access is becoming more important
in the broader fight against security breaches
§ Eliminating Silos
– Implementing separate governance solutions for privileged access and non-privileged access may
create unintended weaknesses in customers’ cyber-security strategy
§ One Stop Shop
– By integrating CA Identity Suite and CA Privileged Access Management, customers can easily
implement an enterprise-wide approach that is based on two proven & market leading solutions
Making the Right Choice

11. 11 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Recommended Sessions
SESSION # TITLE DATE/TIME
SCT39T PAM for Hybrid Enterprises 11/17/2016 at 1:45 pm
SCT37T Streamlining IDM Deployment 11/17/2016 at 3:00 pm
SCT05T PAM Behavioral Analytics 11/18/2016 at 4:30 pm

12. 12 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
We Want to Hear From You!
§ IT Central is a leading technology review site. CA has them to
help generate product reviews for our Security products.
§ ITCS staff may be at this session now! (look for their shirts). If
you would like to offer a product review, please ask them
after the class, or go by their booth.
Note:
§ Only takes 5-7 mins
§ You have total control over the review
§ It can be anonymous, if required

13. 13 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Thank you.
Stay connected at communities.ca.com

14. 14 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD
Security
For more information on Security, please visit:
http://cainc.to/EtfYyw