IT-Analysis.com
IT-Analysis.com Logo
Business Issues Channels Enterprise Services SME Technology
Module Header
Louella FernandesLouella Fernandes
Louella Fernandes
11th April - Managed Print Services: Are SMBs Ready?
Louella FernandesLouella Fernandes
Louella Fernandes
11th April - The Managed Print Services (MPS) Opportunity for SMBs
Simon HollowayThe Holloway Angle
Simon Holloway
11th April - Intellinote - capture anything!
David NorfolkThe Norfolk Punt
David Norfolk
11th April - On the road to Morocco
Philip HowardBloor IM Blog
Philip Howard
10th April - Attunity Gold Client

Blogs > Quocirca

Businesses are over granting privilege and failing to limit sys-admin access
Bob Tarzey By: Bob Tarzey, Service Director, Quocirca
Published: 13th June 2012
Copyright Quocirca © 2012
Logo for Quocirca

System administrators will often need wide ranging access to systems and devices to do their jobs, but systems are not the same as data. Many individuals working in IT departments will in fact be in relatively junior roles. Indeed, they may often be contractors from third parties. Access to confidential data should be just as limited for them as it is for “normal” users.

However, this is often not the case. Many acting under privilege have access to far more data than they need to do their job. The vast majority of organisations admit this happens at least occasionally; for around 20% it is a regular practice.

Not surprisingly, the case is worse where there has been no pro-active attempt to limit the data that those acting under privilege have access to. However, even those that do take such measures admit that system administrators do have access to more data than they need to do their jobs. This is not that surprising; most tools that enable such controls are neither powerful enough nor sufficiently easy to use.

In one area, such controls are absolutely paramount. With the move to cloud computing and the shared IT infrastructure that this involves, cloud service providers must guarantee that their system administrator will be able to access only the systems they need to and not confidential customer data.

To see the full research behind this and get a free copy of Quocirca’s report – “Conquering the sys-admin challenge” – go to http://www.osirium.com/alpha-files/wp

Advertisement



Published by: IT Analysis Communications Ltd.
T: +44 (0)190 888 0760 | F: +44 (0)190 888 0761
Email: