Challenge
For the selected server segment, the bank needed to centralise administrator and contractor access, tie it to requests and record administrative sessions in line with regulatory requirements.
What we did
- Deployed Indeed PAM in a high-availability setup as part of an integrator team
- Connected more than 400 servers and network devices and ended direct use of shared privileged accounts
- Configured time-limited access granted through personal service desk requests
- Enabled session recording and indexing and forwarded events to the bank SIEM
- Prepared documentation for audits and trained the administrators
Outcome
Every administrator action in the connected segment can be traced to a person and a request. The security team accepted the system against an agreed test programme.