The UBC Privileged Access Management (PAM) solution comprises a suite of cybersecurity strategies and technologies used to exert control over the privileged access and permissions for users, accounts, processes, and systems across the IT environment at UBC.
Why we need it
Privileged accounts, and the access they provide, represent the largest security vulnerability at UBC.
Privileged Access is everywhere
Privileged accounts can be found in every networked device, database, application, and server on-premises, in cloud and Industrial Control Systems (ICS) environments, and through the development (Dev) and operations (Ops) pipeline.
Privileged users have the “keys to the kingdom” and, in the case of a cyberattack or data breach, privileged credentials can be used to cause catastrophic damage to UBC.
Privileged Accounts are powerful
Privileged accounts – human and machine – have all-powerful access to confidential data and systems.
Privileged accounts can grant overly broad access rights, far beyond what is needed for the user to perform their job function, which makes them dangerous if they’re not managed effectively.
Privilege is anonymous, unmonitored and unreported
Privileged accounts have shared administrative access, making their users anonymous.
Privileged accounts go unmonitored and unreported and, therefore, unsecured.
Privileged accounts are challenging to manage
Privileged access is pervasive throughout the organization and can be difficult to discover, secure and manage without the right tools.
Our PAM solution allows us to locate privileged accounts, eliminate credential theft and collect audit information.
By dialling in the appropriate level of privileged access controls, PAM will help UBC condense its attack surface and mitigate the damage arising from external attacks as well as from insider malfeasance and human error.
