PROTECTING ASSETS AGAINST INSIDER THREATS

RSMB CORPORATION

GOALS AND OBJECTIVES

  • BUSINESS OBJECTIVE

    Control over the actions of IT-service suppliers within the information systems at a rented data processing center.

  • IT OBJECTIVE

    Implementation of a subsystem for monitoring the activities IT service providers.

SOLUTION

  • A Privileged Access Management (PAM) solution by IT BASTION to provide information security control and monitoring over the activities IT service providers activities.
Solve a similar problem

IMPLEMENTATION

The implemented security control and monitoring solution enables MSP Corporation to record remote access sessions in text log format and video for RDP, VNC, SSH, and SFTP protocols, as well as HTTP and HTTPS protocols through a dedicated terminal server.


With the help of Privileged Single Sign-On technology, the security control and monitoring solution acts as a single-entry point for IT system administrators, identifying sessions even when a common account is used. Passwords for all accounts are stored in encrypted form and automatically changed according to password policy, offering protecting against compromise and transfer to third parties. The information collected by the system serves as an evidence base in the investigation of suspected IT and information security breaches.

Read more

PROJECT RESULTS

The Privileged Access Management (PAM) platform provides control over access and monitoring overthe actions of all system administrators, developers and contractors with privileged authority to critical information systems on a nationwide scale. In the future, MSP Corporation is planning to extend this information security control and monitoring system to protect also the systems within its own IT infrastructure.
  • 6 protocols

    Control over privileged users’ access

  • 2 protocols

    Control over privileged users’ access through a dedicated terminal server

  • Privileged Single Sign-On

    Single-entry point for IT administrators

CUSTOMER REVIEW

Privileged accounts always carry increased risks, and given that part of our infrastructure is located at a rented data center, for us this issue is especially relevant. It became crucial to protect our critical information systems against abuse by external contractors, including server administrators and IT service providers. The project team did a wonderful job and demonstrated a high level of expertise in the integration of PAM solutions.

Sergey Fomichenko

Head of the Information Security Department, MSP Corporation

DO YOU HAVE A SIMILAR PROBLEM?

I have read and agree to the privacy policy

By continuing to use this site, you consent to the processing of your personal data using the Internet services Yandex Metrika and Google Analytics. The procedure for processing your personal data, as well as the implemented requirements for their protection, are set out in the PDN Processing Policy. If you do not agree with the processing of your personal data, you can disable the storage of cookies in your browser settings.

Read more