CyberArk Case Studies PeerStory: CyberArk Endpoint Privilege Manager

Edit This Case Study Record

	PeerStory: CyberArk Endpoint Privilege Manager CyberArk

PeerStory: CyberArk Endpoint Privilege Manager

CyberArk

Technology Category	Cybersecurity & Privacy - Endpoint Security Cybersecurity & Privacy - Identity & Authentication Management
Applicable Industries	Professional Service Software
Applicable Functions	Business Operation
Services	System Integration Training
Challenge	The organization faced significant risks related to endpoint security, particularly concerning the potential for pass-the-hash attacks and same-account harvesting. The challenge was to reduce the attack surface by removing local administrative rights on workstations, which would minimize the chance of privilege escalation. Additionally, the organization needed a solution that could provide immediate reporting to the Security Operations Center (SOC) in case of an incident. The goal was to enhance overall security while maintaining operational efficiency. Read More
About Customer	The customer is an organization that places a high priority on IT security and risk management. They have a dedicated Security Operations Center (SOC) and are focused on reducing the attack surface within their IT environment. The organization values solutions that not only enhance security but also improve operational efficiency. They have a structured approach to managing administrative access and are keen on implementing policies that limit the number of local administrative accounts. The customer is also interested in solutions that can elevate their IT security personnel's profile within the industry. Read More
Solution	The organization implemented CyberArk Endpoint Privilege Manager to address their endpoint security challenges. This tool significantly reduced the risk of pass-the-hash attacks and same-account harvesting by removing local admin credentials on endpoints. The solution also provided immediate reporting capabilities to alert the SOC in case of any incidents. By implementing strict policies, the organization was able to reduce the number of local administrative accounts by 98%, thereby drastically reducing the attack surface. The tool's ability to whitelist applications and automatically elevate privileges improved user efficiency by reducing the number of prompts they had to respond to. This not only enhanced security but also made day-to-day operations smoother for the end-users. Read More Log in to view content
Contents

Technology Category

Cybersecurity & Privacy - Endpoint Security

Cybersecurity & Privacy - Identity & Authentication Management

Applicable Industries

Professional Service

Software

Applicable Functions

Business Operation

Services

System Integration

Training

Challenge

The organization faced significant risks related to endpoint security, particularly concerning the potential for pass-the-hash attacks and same-account harvesting. The challenge was to reduce the attack surface by removing local administrative rights on workstations, which would minimize the chance of privilege escalation. Additionally, the organization needed a solution that could provide immediate reporting to the Security Operations Center (SOC) in case of an incident. The goal was to enhance overall security while maintaining operational efficiency.

About Customer

The customer is an organization that places a high priority on IT security and risk management. They have a dedicated Security Operations Center (SOC) and are focused on reducing the attack surface within their IT environment. The organization values solutions that not only enhance security but also improve operational efficiency. They have a structured approach to managing administrative access and are keen on implementing policies that limit the number of local administrative accounts. The customer is also interested in solutions that can elevate their IT security personnel's profile within the industry.

Solution

The organization implemented CyberArk Endpoint Privilege Manager to address their endpoint security challenges. This tool significantly reduced the risk of pass-the-hash attacks and same-account harvesting by removing local admin credentials on endpoints. The solution also provided immediate reporting capabilities to alert the SOC in case of any incidents. By implementing strict policies, the organization was able to reduce the number of local administrative accounts by 98%, thereby drastically reducing the attack surface. The tool's ability to whitelist applications and automatically elevate privileges improved user efficiency by reducing the number of prompts they had to respond to. This not only enhanced security but also made day-to-day operations smoother for the end-users.

Impact #1	The implementation of CyberArk Endpoint Privilege Manager has drastically reduced the attack surface for local administrative rights, minimizing the chance of privilege escalation.
Impact #2	The organization has successfully removed close to 98% of local administrative accounts on workstations, significantly enhancing security.
Impact #3	The tool's ability to whitelist applications and automatically elevate privileges has improved operational efficiency by reducing the number of prompts users have to respond to.

Impact #1

The implementation of CyberArk Endpoint Privilege Manager has drastically reduced the attack surface for local administrative rights, minimizing the chance of privilege escalation.

Impact #2

The organization has successfully removed close to 98% of local administrative accounts on workstations, significantly enhancing security.

Impact #3

The tool's ability to whitelist applications and automatically elevate privileges has improved operational efficiency by reducing the number of prompts users have to respond to.

Benefit #1	Reduced local administrative accounts by 98%.

Benefit #1

Reduced local administrative accounts by 98%.

Download PDF Version

Overview

PeerStory: CyberArk Endpoint Privilege Manager

Operational Impact

Quantitative Benefit