by Jesper Kråkhede, Sweden
Posted in Security Architecture, Technology on Jul 9th, 2022
The fifth and last area I´ll cover from the privileged access strategy: interfaces. The consoles, portals, APIs and tools that admins and applications use to manage things. A modern environment has a frightening number of them. The Azure portal, the Microsoft 365 admin center, PowerShell, the Graph API, the management console for the firewall, the […]
Posted in Security Architecture, Technology on Jun 4th, 2022
Fourth area from the privileged access strategy: intermediaries. In plain words, all the things that sit between the user and the system. VPNs, jump servers, remote desktop gateways, privileged access management solutions. I have a confession. Every time someone tells me ‘it´s okay, all admin access goes through the jump server’, a small part of […]
Posted in Security Architecture, Technology on May 14th, 2022
The third area from the privileged access strategy: devices. There is a saying that I have repeated so many times that my family can quote it: The security of an account is never better than the security of the device it is used from. Think about it. You can protect your Global Admin with the […]
Posted in Security Architecture, Technology on Apr 5th, 2022
Next area from the privileged access strategy: accounts. I did an informal survey at a customer recently. I asked everyone in the IT department who thought they needed Global Admin to raise their hand. Eleven hands. Then I asked who had used it in the last month for something that actually required Global Admin. Two […]
Posted in Security Architecture, Technology on Mar 1st, 2022
A few years ago I wrote proudly about an ESAE implementation, the red forest, where a pentester gave up after 45 minutes. Well. Microsoft has since retired ESAE as the recommended approach and the classic tier model has a successor: the enterprise access model. I´ll admit it stung a little. You spend years explaining Tier […]