Trojan Chess


January 28, 2012

Do you still keep administrative accounts in text files as well as spread sheets

Filed under: blogging — Admin @ 1:27 am

Modern day IT as well as other enterprises are heavily influenced by servers, databases, network devices, security infrastructure as well as other computer programs for his or her day-to-day procedures. These structure are accessed and controlled via administrative passwords. An average of, the actual applications are used in a shared environment by several administrators. The number of administrative passwords keep on growing as increasingly more servers, devices and applications are added to the organization. Administrators find yourself virtually experiencing a load of passwords and face problems on safely storing, managing and sharing the actual passwords. Spreadsheets, ripped files and even print-outs that contains the passwords are circulated one of the administrators. This traditional practice brings with it a number of issues like the following: Any time one administrator changes any password, it must be updated in every the ‘copies’; or else, at the most needed time period, you might be wanting to login with an outdated or maybe old password! Chances of security attacks on the IT structure become quite bright The business enterprise of the enterprise would be in danger as sensitive passwords continue to be insecureIn a lot of the organizations, a common administrative account is established and all the administrators make use of the same account to gain access to the structure – for instance ‘Administrator’ about Windows, ‘root’ about Unix/Linux, ‘enable’ about Cisco, ‘sa’ about SQL server etc. These types of administrative passwords, also referred to as ‘Shared Management Passwords’ offer unlimited use of the infrastructure to the extent that the user can perform virtually anything. This practice brings along with it accountability issues since the super-user just isn’t role-based and actions could not be traced back to a specific user. Based on a study report involving Gartner, the actual shared accounts with superuser rights or some other high-level gain access to rights pose an important risk in every organizations. Accounts are contributed by several users that are sanctioned to make use of those accounts, or they’re managed making use of fragile guide processes. Substantial risks stem from passwords becoming recognized to others, along with the insufficient individual burden. (Resource: Gartner, Inc., “Toolkit: Password Management Resources for Shared Accounts and Service Accounts”, Ant Allan, 11 January 2007). Also, IT Managers often need to enforce particular standard password policies – such as using strong passwords, curbs on using obvious passwords, rotating passwords at periodic intervals etc. The traditional password operations lacks supply for many of these policies. Governmental and industry regulations prescribe severe security steps for shielding passwords and require thorough audit documents on every single action on the passwords. In the traditional approach, there is no way to ensure compliance to such regulations. In a nutshell, moderators of enterprises are drowning in a pile involving administrative passwords and so are struggling to store and manage these people securely and effectively. The perfect solution is One of the effective methods to securely handle the administrative passwords is always to store the actual passwords in a central, self storage melbourne and automate password management duties. Deploying ‘Password Operations Applications’ or maybe in basic words, the actual ‘Enterprise Password Managers’ can help organizations in controlling use of administrative passwords and in using total control of the shared administrative passwords. Password Manager Pro is a secure burial container for storing and managing shared sensitive information such as passwords, documents and digital identities involving enterprises. The benefits of deploying Password Manager Pro include: Reducing password fatigue and security lapses simply by deploying any secure, centralized burial container for password storage and access Increasing IT productivity many times by automating regular password alterations required in critical devices Providing preventive & investigator security settings through approval workflow as well as real-time notifications on password access Meeting security audits and regulatory compliance such as SOX, HIPAA and For much more, visit Password management

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.