In a world that has turned uncertain, the world of data security remains constant. The COVID-19 virus is wreaking havoc on the service industry, entertainment businesses, and the stock market. Still, many businesses have the flexibility to remain open despite closing their physical doors. As businesses remain open, attackers will continue to find ways to exploit them.…
Current research regarding cyberattacks shows that hackers target Groups in Active Directory, Azure AD and Office 365. Why are groups so attacker-friendly? The CrowdStrike 2019 Global Threat Report discusses how long it takes for attackers that have compromised a single endpoint to move laterally within your network. The Russians have the best average time at a little…
When “Shadow IT” no longer lives in the shadows, it’s time to embrace the technical value! Users can bring this value by utilizing the IT-sanctioned self-service tools. The advent of the cloud has invigorated the notion that users can do a lot of things themselves without the help of IT. Originally referred to as “Shadow…
There has been a lot of talk over the past few years on Just In Time provisioning. That is, using an SSO (Single Sign On) platform to create nearly real-time accounts in web-based applications the first time they are used. This increases productivity and reduces the amount of work required for IT workers to create…
The latest trend in security – Zero Trust Security – demands a “never trust, always verify” approach. At the heart of this approach is the requirement that the configuration of identity and associated assigned security is 100% correct. Without this in place, Zero Trust is protecting an insecure environment. If you’re new to Zero Trust,…
The delegation of directory administration to those outside of IT is a concept whose time has come. But it can’t be done hap-hazardly; IT needs to define what is being delegated and to whom. We’re at a point in the evolution of our industry that two truths have come to fruition: IT no longer has…