Solution

CyberArk EPM

CyberArk

Logo
  • Protect
  • Access Control (PR.AC)
  • Protective Technology (PR.PT)

Supplier sitehttps://www.cyberark.com/products/endpoint-privilege-manager

Reference
#2022002
Open source
No
Railway specific
No
Niche product
No
Easy to install
No
Supplier expertise
little hands-on support
CyberArk Endpoint Privilege Manager (EPM) enforces least privilege and allows organizations to block and contain attacks at the endpoint, reducing the risk of information being stolen or encrypted and held for ransom. A combination of privilege security, application control and credential theft prevention reduces the risk of malware infection. Should be applied on any process running on user End-point devices (PC/smart/tablet)

Features

Remove local admin rights, enforce least privilege, and implement foundational endpoint security controls across all Windows, macOS and Linux endpoints from hybrid to cloud environments.

Benefits

Main users are clients that need elevated rights to install/run certain softwares remove local admin priviledge->implement least priviledge principle suppress full admin rights

Challenges

solutions to be installed by (MS suite) experts Whitelisting to be / implemented based on an inventory of the installed applications/soft/solutions needed (time and ressource consuming). Cyberark infra is complex to deploy - Infrabel has a full time cyberark speciallist to help. Redundancy is critical

Weakness

costly solution

Proof of concept

Infrabel

Proof of concept goal

POC on going to deploy infrastructure Q4 for 50 users, 2000 users by Q1 2023. The purpose of the POC is to check compatibility integration with the existing solutions . Infrabel End User solution is the solution owner