Safestone Technologies Announces Powerful User Management Tool For IBM's System i Platform.
Powerful User Passport - a new easy to configure tool for managing and controlling powerful users.
View all news Published | 10th of February 2009
February 10, 2009 Safestone Technologies, the World's leading supplier of System i security and compliance solutions, announces the release of a new tool Powerful User Passport for managing privileged users of IBM's System i platform, , available in Feb '09.
Regulations and standards such as PCI, COBIT and Basel II require organizations limit and monitor the number of powerful users on production systems.
An " Insider Threat Survey" conducted last year by the ComputerEmergency Response Team (CERT) at Carnegie Mellon University found that 57percent of insider security attacks identified were carried out by employees who at one time had privileged user status. [1]
IT auditors scrutinize this practice in every system audit they perform while IT Managers struggle to comply due to the accepted notion that powerful user profiles are needed for performing daily tasks.
Powerful User Passport simplifies the task of managing powerful users without sacrificing productivity. Administrators can pre-determine which users should be granted privileged access to sensitive data. Users are allowed to swap into a powerful profile when needed and more importantly when authorized, ensuring their access to sensitive data is monitored and in line with the corporate security policy.
Powerful User Passport allows Administrators to specify when profile swaps can occur based on the needs of the business. Swaps can be set to occur at specific times of the day or only on the weekend. One time swaps, called "hot swaps" can be performed in the case of a support emergency. IT Administrators can set up email and message alerts notifying them in real time when a swap occurs.
"Safestone has responded to evolving regulatory requirements with our release of Powerful User Passport, says Simon Bott, Product Manager at Safestone, "We know auditors are looking for this common vulnerability with every IT audit they perform on the System i. Powerful User Passport allows organizations to limit the number of powerful users without experiencing a decrease in production, ensuring the integrity of sensitive data.
The swap to a powerful profile is seamless and the reports provide a valuable audit trail that satisfies the needs of management and auditors alike."
"The comprehensive reporting capabilities of Powerful User Passport provide visibility for management and auditors into how users are accessing data. A GUI interface allows users to filter and sort meaningful results into an easy to understand report for anyone in the organization.
[1] http://www.cert.org/insider_threat/
