by Jesper Kråkhede, Sweden
Posted in Business, Methodology, Security Architecture, Technology on Nov 21st, 2020
Following my previous post, let´s talk money, because that is usually where the PAW discussion ends up. When an admin needs two devices, an extra logon and a few more minutes for each task, someone in management eventually does the math. Ten minutes a day for twenty admins is a lot of hours per year. […]
Posted in Methodology, Security Architecture, Technology on Nov 11th, 2020
I have been talking about Privileged Access Workstations for years. Every customer agrees it is a good idea. Very few actually do it. Why? The honest answer is that it is a pain for the admins. Instead of one laptop they now need two, or at least a separate secure environment. They can´t read mail […]
Posted in Security Architecture, Technology on Oct 19th, 2019
When I review an Azure environment one of the first things I check is who has the Owner role. Too often the list is long and includes consultants that left the project a long time ago. Owner in Azure is Tier 0 for your cloud. It can do anything, including giving itself and others even […]