Nemertes Impact Analysis

The Impact Analysis is a weekly quick-take on breaking IT news.
Nemertes provides expert insight on how recent IT news affects you.

Sign up [1] to receive the Nemertes Impact Analysis or register [2] for access to free web site content.

Hey, what's Your Key Doing in My Lock?

A San Francisco City Government IT employee is charged with allegedly locking
out all administrator access from a critical IT system. To prevent such
situations, organizations must manage privileged access (as part of corporate
identity management) and put into place separation of duties (SoD) policies to
prevent network administrators from also managing system administrator
privileges.

The need for SoD is underscored by Nemertes' finding in the Security and
Information Protection benchmark, that 51% of participants do not have a
formal SoD policy.

Impacts:

Enterprises: If you don't have an SoD policy, establish one. If you have one,
make sure it's being followed!

Vendors: Make sure your privileged accounts integrate into corporate identity
management solutions and support SoD.

Investors: Companies to watch in the privileged account management space
include: IBM (NYSE:IBM), Oracle (NASDAQ:ORCL), Quest Software (NASDAQ:QSFT), RSA
(NYSE:EMC) , Sun (NASDAQ:JAVA) and privately held, Courion, Cyber-ark, e-DMZ
Security and Symark Software.

http://www.nemertes.com/products_services/research/benchmarks/nemertes_benchmark_security_and_information_protection [3]
http://www.eweek.com/c/a/Security/SF-IT-System-Lockout-Continues/?kc=rss [4]

Ted Ritter, Research Analyst