iTnews
  • Home
  • News
  • Technology
  • Security

Enterprises wasting millions updating privileged passwords

By Clement James on Feb 1, 2007 9:23AM
Enterprises wasting millions updating privileged passwords

Typical enterprise spends more than US$500,000 each year, research claims.

The costs associated with the manual updating of privileged passwords are becoming "astronomical", according to new research from security firm Cyber-Ark and industry analyst IDC.

The companies estimate that the typical enterprise spends more than US$500,000 a year simply maintaining and updating privileged passwords.

Privileged passwords are the non-personal, shared and administrative passwords that exist in virtually every device or software application in an enterprise.

Cyber-Ark claimed that companies are unknowingly losing millions of dollars annually on outages, labour-intensive work, legal liability and audit deficiencies related to mismanaged privileged passwords.

Unchecked privileged passwords can be an unmitigated security threat for an organisation, but the research uncovered a general lack of strict policies for creating and varying privileged passwords which could help prevent breaches.

Further complicating the issue is that many, if not most, privileged passwords are generic in nature and lack the personalisation necessary for tracking and auditing.

In fact, most organisations have more privileged user passwords than personal passwords, the researchers said.

"Our research shows that managing privileged passwords is a security conundrum," said Sally Hudson, research manager for IDC's Security Services and Identity Management Products programme, and author of the report.

"IDC believes that the risk can be significantly mitigated by implementing policies which demand special treatment for privileged passwords.

"These include the ability to disable an employee's system access promptly on employee termination, enforcing a company-wide password change on a regular basis and implementing reliable auditing and reporting systems."
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:
enterprisesmillionspasswordsprivilegedsecurityupdatingwasting

Partner Content

Security: Understanding the fundamentals of governance, risk & compliance
Promoted Content Security: Understanding the fundamentals of governance, risk & compliance
Security "mindset shift" needed to protect organisations
Promoted Content Security "mindset shift" needed to protect organisations
How to turn digital complexity into competitive advantage
Promoted Content How to turn digital complexity into competitive advantage
Accenture and Google Cloud team up to create a loveable, Australian-first, renewable energy product
Promoted Content Accenture and Google Cloud team up to create a loveable, Australian-first, renewable energy product

Sponsored Whitepapers

Extracting the value of data using Unified Observability
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
Planning before the breach: You can’t protect what you can’t see
Beyond FTP: Securing and Managing File Transfers
Beyond FTP: Securing and Managing File Transfers
NextGen Security Operations: A Roadmap for the Future
NextGen Security Operations: A Roadmap for the Future
Video: Watch Juniper talk about its Aston Martin partnership
Video: Watch Juniper talk about its Aston Martin partnership

Events

  • Micro Focus Information Management & Governance (IM&G) Forum 2022
  • CRN Channel Meets: CyberSecurity Live Event
  • IoT Insights: Secure By Design for manufacturing
  • Cyber Security for Government Summit
  • Forrester Technology & Innovation Asia Pacific 2022
By Clement James
Feb 1 2007
9:23AM
0 Comments

Related Articles

  • Microsoft readies passwordless logins
  • Apple introduces Lockdown Mode as it battles spyware firms
  • ASD creates CISO role in REDSPICE hiring blitz
  • Threat actors abuse penetration testing tool for attacks
Share on Twitter Share on Facebook Share on LinkedIn Share on Whatsapp Email A Friend

Most Read Articles

Australia scraps digital passenger cards for international arrivals

Australia scraps digital passenger cards for international arrivals

PayTo rollout kicks off

PayTo rollout kicks off

Services Australia spends $50m on IBM Power hardware upgrade

Services Australia spends $50m on IBM Power hardware upgrade

Westpac sets sights on hybrid meeting spaces

Westpac sets sights on hybrid meeting spaces

Digital Nation

Personalisation strategies need to be built from the ground up
Personalisation strategies need to be built from the ground up
Case study: AFL kicks goals with its new digital platform
Case study: AFL kicks goals with its new digital platform
Case Study: Good360 deploys NetSuite, Magento and Salesforce
Case Study: Good360 deploys NetSuite, Magento and Salesforce
Case Study: Multicloud business drivers at MLC Life Insurance
Case Study: Multicloud business drivers at MLC Life Insurance
Case Study: EY invests in AI to improve approach to flexible working
Case Study: EY invests in AI to improve approach to flexible working
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.
Your use of this website constitutes acceptance of nextmedia's Privacy Policy and Terms & Conditions.