Most security vendors and organizations focus security compliance controls on the risks associated with ordinary users. In recent years, however, IT security vendors, corporate compliance officers and auditors have come to understand that high-risk users – savvy technical users with superior knowledge, powerful tools and privileged access to critical IT infrastructure, including internal IT employees, outsourced IT, vendors, remote application developers and contractors - circumvent network and security compliance controls every day.
Although elevated privileged access to critical infrastructure for high-risk users is a necessary aspect of daily operations, these privileges can become a black hole that elevates risk as well. In a climate of economic turmoil and layoffs, and with increased regulation on the horizon, existing controls implemented to meet compliance requirements are costly and have missing pieces. There is an urgent need for companies to adopt an entitlement management strategy for these high-risk users.
Entitlement management enables a company or government agency to control high-risk user access to the critical infrastructure, enforce granular access policy for high-risk users, monitor all high-risk user activities, record all high-risk user events, and view centralized compliance and testing reports to validate that controls for high-risk users are working.
Xceedium has developed and deployed unique and patent-pending technologies to create a comprehensive entitlement management solution that is both secure and efficient. The Xceedium GateKeeper™ is a hardened appliance that has gained wide acceptance with clients in the finance, healthcare, retail, and public sector – due largely to the immediate need for specific technologies to address increasingly strict compliance regulations for stronger technology and information security controls. Xceedium helps companies to easily and cost-effectively establish a security compliance approach that reduces the complexity and cost of managing the risk of entitled high-risk users.
Additional information can be found at http://www.xceedium.com/
Xceedium’s entitlement management solution addresses the compliance issues surrounding the high-risk user black hole with practical real-time capabilities to:
• Control access with enforceable access policies and unique user IDs to contain high-risk users.
• Integrate high-risk user policies with existing security systems.
• Centralize a company’s view of high-risk user activities.
• Compartmentalize high-risk users to specific applications and specific areas on individual network devices and virtual environments.
• Contain high-risk users with its Xceedium Leapfrog Prevention™ agents on key servers to prevent them from moving from authorized to unauthorized work areas.
• Monitor, track, and record command line sessions, key strokes, and screen images to create irrefutable data – a full and detailed audit and forensic trail that proves to auditors that these controls are in place and work.
• Provide compliance reporting and testing to validate that the controls are working
For more information on how Xceedium Entitlement Management reduces the cost and complexity of controlling high-risk users to meet compliance requirements, visit http://www.xceedium.com/
About Xceedium, Inc.
Xceedium is the premier provider of entitlement management solutions that reduce the complexity and cost of controlling high-risk users. Employing unique and patent-pending technologies, the Xceedium GateKeeper™ line of hardened appliances enables companies to actively manage high-risk users by automating compliance reporting, managing outsourcing risk, providing secure and efficient access to remote infrastructure and controlling vendor access.
Xceedium solutions have gained wide acceptance in both the private and public sector, due largely to leading technologies specifically developed to address increased outsourcing and strict compliance regulations. Xceedium GateKeeper is deployed in the largest enterprise and government IT environments, as well as in branch offices, SMBs, departments and managed service providers. An ever-expanding client base includes household names in financial services, retail, healthcare, managed IT services and other key verticals, as well as strong representation across a wide spectrum of U.S. government IT facilities.
Contact
David Ballard
Xceedium, Inc
dballard@xceedium.com
201-536-1000 ext.117
