Key Benefits for Compliance
Most organizations are subject to some form of regulatory compliance requirements such as GDPR, ISO27001, Cyber Essentials, DSPT, or PCI DSS. All regulations require active management of privileged accounts to ensure only the right people have the right access to the right systems. Osirium offer a series of guides showing how to simplify compliance and audits.
Audit and Logging
PAM is a central point of control for all third-party access into corporate IT systems including security systems, connected infrastructure(e.g., heating and ventilation), networking devices, Windows, Unix and web-based applications. The single point of control makes it easy to control access and report access for audits.
Secure Authentication
Osirium PAM supports external authentication through RADIUS with major IAM solutions for multi-factor authentication to reduce the risk of third-party accounts being shared ensuring corporate standards for identity are enforced.
Single Sign On is performed by injecting the required admin credentials for the target system by
Session Monitoring and Recording
Third-party access sessions can also be viewed in real-time enabling third-party access to be monitored while it happens, without the need to give up a workstation in a remote-control session. If there’s any suspicious behaviour, the session can be immediately terminated.
A clear warning and visible recording icon dissuade remote users from using the sessions for anything they shouldn’t.
A full record of sessions includes when the session happened, how long, with what level of access and the activity performed on that device.
Automate Tasks for Security and Productivity
Most IT operations can be automated using Osirium Automation(included with Osirium PAM). When using automated playbooks, users can only run those tasks they have been delegated. This ensures that not only are the admin credentials protected, users can’t access any systems or options they shouldn’t. All sessions are fully logged, even if an operation needs access to multiple systems and devices. These logs can be integrated with the corporate SIEM tools.
Simplified Audits and Re-certification
Annual audits become simpler with regular validation of privileged accessed. Osirium Automation can let team leaders validate and update the lists of users in their groups without needing IT support. See how in this video.
Osirium PAM for Compliance Standards
Cyber Essentials
Cyber Essentials is mandatory in many industries and is often mandatory. Besides improving cybersecurity, Cyber Essentials encourages good practice and improves business and IT systems resilience.
Accelerating Cyber Essentials with Osirium PAM
Data Security and Protection for NHS
The Data Security and Protection (DSP) requirements are built upon Cyber Essentials and affect all NHS trusts and their partners.
DSP Compliance with Osirium PAM
GDPR
Global Data Protection and Regulation (GDPR) is an established requirement for all organizations. PAM plays an important role in protecting Personally Identifiable Information (PII).
ISO 27001
ISO/IEC 27001 (ISO 27001) is the international standard that describes best practice for an information security management system (ISMS).
Accelerating ISO27001 Compliance with Osirium PAM
NIST 800-53
NIST 800-53 provides organisations with the necessary security controls to strengthen their information systems and the environments in which those systems operate.
PCI DSS
Payment Card Industry Data Security Standard is a worldwide standard that was set up to help businesses process card payments securely and reduce card fraud.
