The document discusses challenges around privileged access management and how BeyondTrust solutions address these challenges. It notes that 62% of companies do not adequately track privileged access, 9 out of 10 vulnerabilities are associated with excessive admin rights, and 81% of breaches start with stolen or weak passwords. The attack surface is expanding as companies adopt technologies like cloud, IoT, and DevOps. BeyondTrust provides visibility and control over all privileged accounts and users across various use cases like protecting passwords, eliminating embedded passwords, removing admin privileges, controlling application usage, reducing third party risk, and supporting users while meeting compliance requirements.

1. Retos actuales e innovación sobre el
control de accesos privilegiados
Sinue Botello
Regional Sales Manager
BeyondTrust
#ProtectionPeru2019

2. 62%
of companies aren’t adequately
tracking privileged access 4
9 OUT OF 10
vulnerabilities are associated
with excess admin rights 1
81%
of breaches start with either
stolen and / or weak passwords2
Unmanaged Privileges and Accounts Lead To
Breaches
80%
of breaches are the result of
privileged account abuse or misuse.3

3. SaaS + Cloud Admins - Superuser Accounts - Database & Application Admins - Privileged End Users - Developers -
Machine Password & Keys
DevOps
 DevOps and SecDevOps Tools
 Dynamic Virtual Environments
 Containers
 Microservices
Internet of Things
 Roaming workstations
 BYOD
 Cameras
 Sensors
 Printers
 Any device with embedded
Internet connectivity
Cloud & Hybrid Cloud
 Cloud Management Platforms (AWS,
Azure)
 Virtualized Environments (VMWare,
MSFT)
 Virtualized Machines (UNIX, Linux,
Windows)
 SaaS Apps (Facebook, LinkedIn, Custom)
On-Premise
 Shared Administrator Accounts
 Desktops (Windows, Mac)
 Servers (Unix, Linux, Windows)
 Industrial Control Systems
 Security & Network Infrastructure
 Applications & Databases
 Machine Credentials (App to App)
 Hypervisors & Virtual Machines
Attack Surface Continues To Expand As Companies
Evolve

4. Close The Gaps With Visibility and Control Over All
Privileged Accounts, Users, and Access
• All privileged accounts are controlled and
managed from a single platform
• Granular, flexible remote access enables
access to only the required resources
• Resource access is managed intelligently
with aggregated data
• Full visibility of all privileged account
activity including session recordings
• User experience that empowers individuals
AFTER SCENARIOS
• Unmanaged privileged credentials
• Uncontrolled or “all or nothing”
third party and insider access
• Unable to validate privileged
security compliance requirements
• Lack of consolidated reporting and
visibility
• Impeded user productivity
BEFORE SCENARIOS
#ProtectionPeru2019

5. The BeyondTrust Advantage
• MOST COMPREHENSIVE USE CASE
COVERAGE
• Leading PAM portfolio based on
30+ year history of innovation
• Aggressive roadmap to PAM
maturity & next-gen capabilities
• Global Development organization
and continuous investment in
evolving and expanding solutions
FLEXIBLE, INTEGRATED PLATFORM
• Provides visibility and control over
all privileged accounts and users
• Fast time to value with lower cost to
purchase, implement, and manage
full portfolio
• Central management with data,
workflows and common functions
shared across solutions
CUSTOMER-FIRST ORGANIZATION
• Proven partner trusted by 20,000
global customers
• Extensive partner network
• Flexible licensing and deployment
models
• Global 24/7 Support & Services
organization, with robust resources
for training and support
#ProtectionPeru2019

6. • PROTECT PASSWORDS AND CREDENTIALS
• ELIMINATE EMBEDDED PASSWORDS IN APPS
• REMOVE ADMIN PRIVILEGES FROM USERS AND SYSTEMS
• CONTROL APPLICATION USAGE
• REDUCE RISK FROM THIRD PARTY ACCESS
• SUPPORT USERS, DESKTOPS, AND DEVICES
• MEET COMPLIANCE MANDATES
Use Cases

7. #
© BeyondTrust 2019
Protect
Passwords
& Credentials
PRIVILEGED ACCOUNT DISCOVERY
Find and onboard credentials quickly with insight on
age and status
SHRINK YOUR ATTACK
SURFACE AND REDUCE
THE RISK OF A CYBER
BREACH
CENTRALIZED PASSWORD STORAGE
Manage, rotate, and randomize credentials for
privileged accounts
BEYOND USER PASSWORDS
Manage credentials for service accounts, cloud
services, SSH keys, and app to app access
CREDENTIAL INJECTION
Access endpoints directly without exposing plain
text passwords
AUDIT & COMPLIANCE
Track and log privileged credential activity
automatically and set granular permissions

8. #
© BeyondTrust 2019
Eliminate
Embedded
Passwords in
Apps
CREDENTIAL DISCOVERY
Find passwords and keys embedded in applications,
scripts, and other code
CONTROL SCRIPTS, FILES,
CODE AND EMBEDDED
KEYS TO CLOSE
BACKDOORS TO YOUR
CRITICAL SYSTEMS
CREDENTIAL REMOVAL
Eliminate embedded or hardcoded credentials and
service accounts and replace them with REST API calls
EXTENSIVE REST INTERFACE
Leverage multi-language support, including C/C++,
Perl, .NET, and Java
MONITORING & REPORTING
Log and audit application and other non-human
credential activity
#ProtectionPeru2019

9. #
© BeyondTrust 2019
PREVENT ATTACKS
Remove admin rights from all users to close gaps that
lead to ransomware and malware propagation
ACHIEVE COMPLIANCE
Meet best practices for removing admin rights and
whitelisting applications
IMMEDIATE SECURITY GAINS
Achieve fast time to value by removing admin rights
quickly
VISIBILITY INTO USER ACTIVITY
Create a consistent audit trail with integrated
session and file integrity monitoring
OPERATE EFFICIENTLY AT SCALE
Reduce helpdesk tickets, simplify maintenance, and
enable an admin-free environment
Remove
Admin
Privileges
From Users
and Systems
ENABLE USERS TO WORK
PRODUCTIVELY WITHOUT
ADMIN RIGHTS

10. #
© BeyondTrust 2019
Control
Application
Usage
TRUST BASED WHITELISTING
Set flexible rules including automatic approval for
advanced users and challenge-response codes
ELIMINATE UNKNOWN AND
UNWANTED APPLICATIONS
IN YOUR NETWORK
VULNERABILTY BASED APP MANAGEMENT
Leverage vulnerability data to provide intelligence on the
risk of applications targeted for elevation
CLEAR & CUSTOMIZABLE MESSAGING
Improve the user experience by enabling branded messages
to support access to previously unsanctioned software
SUPPORT FOR MULTIPLE APPLICATIONS
Cater to the needs of all users and tasks with support
for a broad set of application types
#ProtectionPeru2019

11. #
© BeyondTrust 2019
Reduce Risk
From Vendor
Access
SECURE REMOTE ACCESS
Provide third-party vendors with secure, reliable
connections to access your network externally
CONTROL AND MANAGE
THIRD PARTY ACCESS TO
YOUR NETWORK
ACCOUNT ROTATION
Rotate or reset vendor accounts automatically based on
your specifications
ACCESS ELEVATION
Grant vendors temporary elevated access, or limited to
certain timeframes
MONITORING
Log all session activity for a complete audit trail and
real time reporting
#ProtectionPeru2019

12. #
© BeyondTrust 2019
SECURE REMOTE SUPPORT
Provide fast remote assistance to any desktop, server, or
mobile device with screen sharing and remote control
MONITORING
Log all session activity for a complete audit trail, with
real time reporting
CHAT SUPPORT
Increase support staff productivity and end user
satisfaction
REMOTE CAMERA SHARING
Perform remote support on anything your customer
can see, including hardware and peripherals
INTEGRATIONS
Maximize existing investments with CRM and ITSM
tools and password management solutions
Support Users,
Desktops &
Devices
QUICKLY ACCESS AND FIX
ANY DEVICE OR DESKTOP,
ANYWHERE, ON ANY
PLATFORM

13. #
© BeyondTrust 2019
GRANULAR PERMISSIONS
Assign permissions individually or through group
policies for privileged users & IT vendors
AUDITING & MONITORING
Log all session activity for a complete audit trail with
real time reporting
PASSWORD PROTECTION
Enforce password policies and automatically rotate
passwords
ENCRYPTION
Secure all communications between the user and the
remote systems using TLS 1.2 encryption
TWO FACTOR AUTHENTICATION
Utilize native 2FA or integrate with your existing
solution
Meet
Compliance
Mandates
SATISFY AUDIT AND
COMPLIANCE
REQUIREMENTS QUICKLY
AND EFFECTIVELY

14. #ProtectionPeru2019

15. Thanks!
#ProtectionPeru2019