by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Jul 17th, 2023
In my last post I described the SAW, the Secure Admin Workstation Microsoft uses for its own admins. A few of you asked how it compares with the PAWs I see at customers. Fair question. The idea is the same. The level is not. Let me describe a typical customer PAW. It is a separate […]
Posted in Business, Security Architecture, Security metrics on Jul 16th, 2023
Following my post on SAWs, a business question: What does it actually cost to have someone with Global Admin or Domain Admin rights? Most organisations only count the salary. But the real cost of a privileged admin, done properly, includes much more. A dedicated, hardened device in addition to the normal laptop. Licences for strong […]
Posted in Security Architecture, Technology on Jul 14th, 2023
I often get asked how Microsoft itself protects its admins. Part of the answer is public, and it has a name: SAW, Secure Admin Workstation. Microsoft has described SAWs in public material for several years. The idea is the same as the PAW I have written about for a long time, taken quite far. Engineers […]