Background Checks
BeyondTrust conducts pre-employment background checks of all global candidates for employment. Such background checks include the following elements: identity verification, right to work, criminal record checks, credit, education verification, and drug screening.
Awareness Training
A formal Security Awareness Training program in place that requires all employees to complete prior to employment, annually, and on an as needed basis. The content covers applicable security threat information, social engineering to include phishing/ransomware, compliance efforts, and privacy considerations. Additionally, phishing simulations are performed for all staff to ensure awareness is increased around social engineering attacks.
Identity & Access Management
Formal procedures are implemented for managing access throughout the organization. All access requests are reviewed and approved in accordance with defined policies. Users are centrally managed and authenticated via corporate Single Sign-On which requires FIDO2 multi-factor authentication (MFA). Technical and role-based access controls are in place to ensure that users only have the necessary level of access required to carry out their duties following Least Privilege criteria.
Endpoint & Network Security
BeyondTrust protects all endpoints within the organization to minimize the likelihood of a weakness being exploited. Controls such as full disk encryption, endpoint detection and response (EDR), web-content filtering, centralized configuration management, and the utilization of our own product suite empowers our security personnel to effectively safeguard against anomalous activity.
To guarantee the protection of all email communications against malicious acts such as spam, phishing, and viruses, our company has implemented a highly regarded email security platform. Next generation Internet-edge firewalls are configured to inspect all traffic across our environments and alerts are configured to notify staff of anomalous activity.
Security Operations Center
A dedicated team of individuals are tasked with the requirement of managing all aspects of logging and monitoring within the organization, including both corporate and cloud environments. Logs are centrally managed and ingested into a SIEM so that anomalous activity can be detected and actioned accordingly.
Logging & Monitoring
The BeyondTrust SIEM receives comprehensive security logging such as ingress authentication logging to track user access and activity, threat analytics to detect any suspicious software installations, and third-party access detection to alert BeyondTrust personnel to any potential malicious activities. All such incidents are automatically reported to the BeyondTrust Information Security team for analysis and appropriate action taken based on the severity and relevance of the alert.
Incident Response
A robust incident response plan is in place which addresses all aspects of identification, containment, eradication, recovery, and incorporating lessons learned to overall plan improvement.
