Cybersecurity Insurance Checklist - Meet Insurance Requirements with BeyondTrust PAM Download for Free

  • Partners
  • Support
  • Careers
  • English
    • Deutsch
    • français
    • español
    • 한국어
    • português
BeyondTrust
  • Products

    Privileged Password Management

    Discover, manage, audit, and monitor privileged accounts and credentials.

    • Password Safe
    • DevOps Secrets Safe
    • Privileged Access Discovery Application

    Endpoint Privilege Management

    Enforce least privilege across Windows, Mac, Linux, and Unix endpoints.

    • Windows and Mac
    • Unix and Linux
    • Active Directory Bridge

    Secure Remote Access

    Centrally manage remote access for service desks, vendors, and operators.

    • Remote Support
    • Privileged Remote Access
    • Privileged Access Discovery Application

    Cloud Security Management

    Automate the management of identities and assets across your multicloud footprint.

    • Cloud Privilege Broker

    BeyondInsight

    Experience the industry’s most innovative, comprehensive platform for privileged access management.

  • Solutions

    Use Cases

    • Cloud Security
    • Compliance
    • Cyber Insurance
    • Digital Transformation
    • Endpoint Security
    • Operational Technology
    • Ransomware
    • Service Desk Efficiency
    • Zero Trust

    Industry Applications

    • Financial Services
    • Government Agencies
    • Healthcare
    • Law Enforcement
    • Manufacturing
    • Schools & Universities

    Solutions

    The BeyondTrust Privileged Access Management portfolio is an integrated solution that provides visibility and control over all privileged accounts and users.

  • Resources

    Learn

    • Blog
    • Customer Stories
    • Competitor Comparisons
    • Datasheets
    • Demos
    • Glossary
    • Podcast
    • Whitepapers

    Attend

    • Events
    • Go Beyond
    • Training
    • Webinars

    Support

    • Changelog
    • Professional Services
    • Technical Documentation

    Universal Privilege Management

    Our innovative Universal Privilege Management approach secures every user, asset, and session across your entire enterprise.

  • Company
    • About
    • Leadership
    • Core Values
    • Partners
    • Careers
  • Watch Demo
  • Contact Sales

Don't say "Lockdown"!

October 15, 2012

  • Blog
  • Archive

Here at BeyondTrust, we have been fortunate to be able to speak with thousands of security professionals in dozens of industries, and it is astonishing how differently organizations assess risk and approach computer security. Some organizations are very strict about security and are able to completely lock down desktops. Others are significantly more lax about the security of their desktop computers, and place a bigger emphasis on servers and backend infrastructure. What is interesting about these two ends of the spectrum is how the organization ends up where they are. When we speak to IT professionals who have loosely managed desktops, they universally cite the fact that it is difficult to change the culture of the organization to implement the controls to better manage those desktops and improve security. For folks who have very locked down environments, we find that they did, in fact, have to change the culture in order to improve security. Here are a few things that you can do to help smooth the transition to a new and improved security position.

  • Don't use words like "Locked Down Desktop." The end users will freak out if you say this. Even though the end user doesn't own the desktop, they still think it is theirs. It's better to brand any project to improve desktop security as "Trusted Desktop Initiative” or "Secure Desktop” instead of using the words "lock down."
  • Do explain to the end users why improving security is good for them. More security means fewer viruses and malware. A well-managed desktop means fewer application conflicts. Following security best practices like removing admin rights from users, means less configuration drift and more stability, reliability and speed in the long run.
  • Don’t try to do too much. Many organization want to roll out too much security, all at the same time. Some organizations want to deploy more control at the same time they roll out a new operating system. The most successful organizations that we have worked with set the foundation first. By implementing security best practice (Anti-virus, Least Privilege, Vulnerability Scanning, etc.) and then layering on additional tools (Application Allow listing, Device Control, etc.), you will end up with a more robust implementation in the long run.
  • Do get executive buy-in. Everything goes much more smoothly when the boss sponsors what you are trying to do.
  • Don’t go it alone. As we learn more about our industry and what is available, we realize just how much we don’t know. Technology is constantly changing, and no one person can keep up with all of the knowledge, so seek out advice from others. Talk with your vendors, peers at other organizations and your colleagues. They can be a huge asset when undertaking a project to improve security.
  • Don’t forget to communicate. End users hate surprises. All they want to do is get their job done. That’s how their performance is measured. If they are surprised by some new security restriction that slows them down, they are going to kick and scream, but if you’ve communicated appropriately, your chances of headaches are lessened.
Photograph of Scott Lang

Scott Lang, Sr. Director, Product Marketing at BeyondTrust

Scott Lang has nearly 20 years of experience in technology product marketing, currently guiding the product marketing strategy for BeyondTrust’s privileged account management solutions and vulnerability management solutions. Prior to joining BeyondTrust, Scott was director of security solution marketing at Dell, formerly Quest Software, where he was responsible for global security campaigns, product marketing for identity and access management and Windows server management.

Stay Up To Date

Get the latest news, ideas, and tactics from BeyondTrust. You may unsubscribe at any time.

I agree to receive product related communications from BeyondTrust as detailed in the Privacy Policy, and I may manage my preferences or withdraw my consent at any time.

You May Also Be Interested In:

Whitepapers

Cybersecurity Insurance Checklist

Whitepapers

Microsoft Vulnerabilities Report 2021

Whitepapers

Privileged Access Management: PAM Checklist

Keep up with BeyondTrust

I agree to receive product related communications from BeyondTrust as detailed in the Privacy Policy, and I may manage my preferences or withdraw my consent at any time.

Customer Support
Contact Sales

Products

  • Endpoint Privilege Management
  • Password Management
  • Privileged Remote Access
  • DevOps Secrets Safe
  • Remote Support
  • Cloud Privilege Broker

Resources

  • Blog
  • Case Studies
  • Competitor Comparisons
  • Datasheets
  • Glossary
  • Podcast
  • Videos
  • Webcasts
  • Whitepapers

About

  • Company
  • Careers
  • Contact
  • Events
  • Leadership Team
  • Partner Program
  • Press
BeyondTrust Logo
  • Facebook
  • Twitter
  • LinkedIn
  • Privacy
  • Security
  • Manage Cookies
  • WEEE Compliance

Copyright © 1999 — 2022 BeyondTrust Corporation. All rights reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust Corporation is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.