pre-con ed: governance of privileged identities—key to breach prevention
TRANSCRIPT
![Page 1: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/1.jpg)
World®’16
GoverningyourPrivilegedAccessPreconferenceTechnicalSessionEhudAmiri,ProductManagementMattMiller,Presales
SCX03E
SECURITY
![Page 2: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/2.jpg)
2 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
©2016CA.Allrightsreserved.Alltrademarksreferencedhereinbelongtotheirrespectivecompanies.
Thecontentprovidedinthis CAWorld2016presentationisintendedforinformationalpurposesonlyanddoesnotformanytypeofwarranty. The informationprovidedbyaCApartnerand/orCAcustomerhasnotbeenreviewedforaccuracybyCA.
ForInformationalPurposesOnlyTermsofthisPresentation
![Page 3: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/3.jpg)
3 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Abstract
EhudAmiri
MattMillerCATechnologies
![Page 4: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/4.jpg)
4 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
OneStopShopforallIdentityServices
![Page 5: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/5.jpg)
5 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
WhyPrivilegedAccessGovernanceIsNeeded?
•
•
Theoutcome•
•
•
••
TheSituationToday
![Page 6: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/6.jpg)
6 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
PrivilegedAccessGovernance
•
•
•
TheCAIdentitySuiteSolution•
•
••
TheCAApproach
![Page 7: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/7.jpg)
7 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
AutomatedProvisioningandDe-Provisioning
![Page 8: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/8.jpg)
8 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
AccessCertification
Account certification
Update HR
reports
Mitigate access
risk
![Page 9: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/9.jpg)
9 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
AccessRequest
![Page 10: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/10.jpg)
10 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Why Now and Why CA for Privileged Access Governance?
• Compliance- Manyorganizationsarefacingcompliancepressuretoensureproperprivilegedaccess
governanceisimplemented
• BetterSecurity- Managingandgoverning“whohasaccessandwhy”forprivilegedaccessisbecomingmore
importantinthebroaderfightagainstsecuritybreaches
• EliminatingSilos- Implementingseparategovernancesolutionsforprivilegedaccessandnon-privilegedaccessmay
createunintendedweaknessesincustomers’cyber-securitystrategy
• OneStopShop- ByintegratingCAIdentitySuiteandCAPrivilegedAccessManagement,customerscaneasily
implementanenterprise-wideapproachthatisbasedontwoproven&marketleadingsolutions
Making the right choice
![Page 11: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/11.jpg)
![Page 12: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/12.jpg)
12 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
TechnicalOverview
§ GranularprovisioningconnectorforCAPAM– UseofCAPAMRESTAPIsandCAPAMAPIKey– GranularmanagementofCAPAMUsers(Morethan25attributes)– MappingUserstoRoles,UserGroups,Devices,&DeviceGroups– SupportforLocalandLDAP/ADCAPAMUsers
§ CAIdentitySuiteuserexperienceforCAPAM– OutoftheboxtemplatesforUserandDevicecertifications
![Page 13: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/13.jpg)
13 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
LabPrerequisites
Thelabincludesthefollowingthreevirtualmachines:– Machine1:CAIdentityPortalplusCAIdentityManager– Machine2:CAIdentityGovernance– Machine3:CAPAM
Theenvironmentisalreadypreconfigured(wewillshowhowthiswasdone):
– CAIdentityManagerconfiguredwithCAPAMendpoint– CommunicationandtrustisestablishedusingCAPAMAPIKey– DataispopulatedinCAIdentitySuite
![Page 14: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/14.jpg)
14 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
RecommendedSessions
SESSION# TITLE DATE/TIME
SCT21S CAIdentitySuiteLaunchandRoadmap 11/17/2016at12:45pm
SCT62S TheStateofLouisianaandCATechnologies– ImprovinglivesthroughHealthcareModernization 11/17/2016at3:00pm
SCT92P CIOSummitPanel: MaximizingTheValueofYourOnPremiseandCloudEnvironments 11/17/2016at4:30pm
![Page 15: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/15.jpg)
15 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Don’tMissOurINTERACTIVESecurityDemoExperience!
SNEAKPEEK!
15 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
![Page 16: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/16.jpg)
16 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Wewanttohearfromyou!
§ ITCentralisaleadingtechnologyreviewsite.CAhasthemtohelpgenerateproductreviewsforourSecurityproducts.
§ ITCSstaffmaybeatthissessionnow!(lookfortheirshirts).Ifyouwouldliketoofferaproductreview,pleaseaskthemaftertheclass,orgobytheirbooth.
Note:§ Onlytakes5-7mins§ Youhavetotalcontroloverthereview§ Itcanbeanonymous,ifrequired
![Page 17: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/17.jpg)
17 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Questions?
![Page 18: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/18.jpg)
18 ©2016CA.ALLRIGHTSRESERVED.@CAWORLD#CAWORLD
Thankyou.
Stayconnectedatcommunities.ca.com
![Page 19: Pre-Con Ed: Governance of Privileged Identities—Key to Breach Prevention](https://reader031.vdocuments.mx/reader031/viewer/2022030305/587268fe1a28ab31498b5491/html5/thumbnails/19.jpg)
@CAWORLD#CAWORLD ©2016CA.AllRIGHTSRESERVED.19 @CAWORLD#CAWORLD
Security
FormoreinformationonSecurity,pleasevisit:http://cainc.to/EtfYyw