Feed on
Posts
Comments

Monthly Archive for March, 2022

Following my post on the enterprise access model, a word to management about the organisation behind it. Securing privileged access is not something IT can do on its own. It changes how admins work, who is allowed to do what and how fast certain things can be done. That means it needs decisions that only […]

Read Full Post »

A few years ago I wrote proudly about an ESAE implementation, the red forest, where a pentester gave up after 45 minutes. Well. Microsoft has since retired ESAE as the recommended approach and the classic tier model has a successor: the enterprise access model. I´ll admit it stung a little. You spend years explaining Tier […]

Read Full Post »