In this video, Shtilman sits with SC Magazine reporter, Danielle Walker, to discuss privileged management and ways organizations can secure corporate accounts.

"An effective security strategy should include adequate privileged management security practices. Certain applications should be whitelisted, others blacklisted, and those that fall between the lines are graylisted. According to Leonid Shtilman, CEO of Viewfinity, graylisted applications are the ones that need to be monitored closely. They need to put under restrictive modes that won't allow the application to access corporate data, thus limiting the amount of damage that can be done if an intruder happens to gain privileged access to an employees account."

Read more:  http://www.scmagazine.com/video-privileged-access-in-the-enterprise/article/288300/ 

A Fine Line

 Print This
 Email This
 Bookmark/Share 
 Most Popular

If “time is money,” no one knows this better than Movado. The premier watchmaking company, based in Switzerland and Paramus, N.J., designs, manufactures and distributes some of the world’s most recognized brands including Ebel, Coach, Hugo Boss, Juicy Couture, Lacoste and Tommy Hilfiger.

The company has distribution offices around the world and a workforce of more than 1,100 desktop and laptop users, running an average of more than 30 applications. The company has always focused on best practices to proactively protect the entire organization, but the number of applications and employees’ ability to access them were creating problems.

Specifically, Movado’s IT help desk was being inundated 24 hours a day with support calls for everything from spyware and popups that impacted computer performance to installing new printers. Even simple issues were impacting productivity, when employees had to wait for an on-site visit from IT personnel to fix a problem.

The solution was privilege management software from Viewfinity that enabled the company to control and streamline its systems and eliminate “nuisance” calls to the help desk.

Read the full article here:  http://www.stores.org/STORES%20Magazine%20November%202012/fine-line 

User Privilege Management: Not Just for Linux

Posted by Haim Lichaa in Open Port IT Community on Apr 2, 2012 3:34:32 PM

I came across this blog article and was impressed with the author's clear articulation of “Least Privilege Management” beyond the Linux world.  His analogy of the “Honor System” explains the situation with finesse.  For all you IT Security Pros, I recommend reading the article:

http://communities.intel.com/community/openportit/blog/2012/04/02/user-privilege-management-not-just-for-linux

Viewfinity Privilege Management 4.0 was honored with a Stevie® Award in the New Product or Service of the Year - Software - Security Solution category in The 10^th Annual American Business Awards.  Viewfinity stands out as the only privilege management vendor to be awarded the Stevie Award in 2012.  More than 3,000 nominations from organizations of all sizes and in virtually every industry were submitted this year for consideration in a wide range of categories. Stevie Award winners were selected by more than 270 executives nationwide who participated in the judging process this year. 

"The Stevie Award reflects our dedication to developing and delivering the industry's most advanced and reliable privilege management solution,” said Leonid Shtilman, CEO, Viewfinity. “It’s an honor to have won this distinction out of an extensive list of nominees, and we are equally as proud to have this recognition come alongside established, proven products from RSA, HP, GFI, SecureAuth and Threatmetrix.”

If you missed the popular webinar with Group Policy Guy and Microsoft Group Policy MVP, Darren Mar-Elia and Viewfinity on Windows 7 Security and Managing UAC Prompts, then you can catch the recording here.

Have you used the same password more than once at your workplace? If you answered yes, then you are definitely not alone and should continue reading.

In a recent security breach at Dropbox as reported by Richard Adhikari of TechNewsWorld, hackers found their way into Dropbox  by trying stolen passwords from other sites on Dropbox and were successful in compromising many accounts including that of an employee.  Dropbox says “reused passwords are to blame for a wave of spam that's hitting subscribers to the service.”  The company’s response to the security breach was to introduce two-factor password authentication.

Is Password Management the solution? 

The reality is this issue cannot be solved through password management alone. The problem is not Dropbox, the problem is that a policy of password-only security is outdated.  You can change passwords frequently, you can use software that will intelligently look at suspicious behavior, etc., but the only way to confirm a person’s identity is to add biometric facial recognition. For example, in the EU they’re not using their passport they are looking at the camera and the camera authorizes their entry.   

A camera for facial recognition plus passwords will solve 99% of the problems. Cameras are very prevalent on today’s desktop PCs and laptops so it is fairly easy to do. Today’s facial recognition technology is very advanced so even less sophisticated software would be enough. It’s a small database storage investment for an excellent solution.

SC Magazine Australia, one of the information security industry's leading news and product evaluation sources, gave the Viewfinity Privilege Management solution a 5-star rating (five out of five stars) in the 2012 Risk and Policy Management category. 

Peter Stephenson of SC Magazine Australia said “Overall, we find this product to be a good value for the money due to its comprehensive feature set and ease of management and automation abilities.”

Have a look, the article is online here

The analysts and IT community at large are starting to spread awareness about the importance of protecting endpoints running Windows XP after the April 2014 support sunset date.  This is a smart move.

A fundamental safeguard to preventing security attacks is to remove administrative privileges from the desktop creating a least privileges environment to secure endpoints.  Organizations that run Windows XP today, and who will continue to run PCs on Windows XP, need to re-assess their position on allowing users to have local administrator rights.  Removing administrator privileges from endpoints is a fundamental safeguard that is vital to every IT infrastructure, including those running Vista and Windows 7.  This equates to less vulnerability to hackers, malware, and costly security breaches.

Viewfinity plays an important role in offering a level of endpoint protection for companies that will still run the Windows XP OS after April 8, 2014.  Let me know if you’d like us to contact you and discuss how to approach the process of removing administrator rights and managing privileges for users that will need elevated permissions. 

Darren Mar-Elia, Group Policy MVP and GPOGuy.com, is Viewfinity's guest speaker on “Windows 7 Security and Managing UAC Prompts.”  This webinar will explore Windows 7 migrations and the removal of local administrative rights as part of this desktop refresh.  Topics to be discuss include desktop lockdown, use of Windows 7 built-in security features, and management of UAC prompts. 

The webinar takes place on Tuesday July 31, 2012 at 2pm EDT.  Darren Mar-Elia will discuss the components of the Windows built-in security features and the best practices surrounding these features. Darren will also introduce additional methods for enhancing endpoint security within Windows 7 as related to managing UAC dialog boxes and applications that require administrator rights. 

Register for the webinar here.

Microsoft offers various sources to learn more about its partner products.  More information related to how Viewfinity complements and supports Microsoft Configuration Manager and Windows Endpoints and Servers can be found on Microsoft’s Pinpoint directory and Microsoft’s System Center Alliance Solution Guide.

The Microsoft Pinpoint directory is a unique place for business customers to research the right technology solution for their company and also is a place for developers and technology service providers to find the right technology solutions for their customers.  Here you can read and submit reviews about Viewfinity and learn more about Viewfinity Privilege Management.

The Microsoft System Center Alliance Solution Guide allows you to learn more about its partners’ solutions and respective compatibility with Microsoft System Center components.  The solution guide comes in three phone apps which can be downloaded from the site.