Privileged Access Management
What is Privileged Access Management?
Security solutions and practices for controlling, monitoring, and auditing privileged account access to critical systems and sensitive data.
Terms that appear alongside privileged access management
Each of these is named in at least one of the same controls as privileged access management. The number is how many controls name both.
- access management 39 shared controls
- access control 25 shared controls
- authentication 22 shared controls
- multi factor authentication 17 shared controls
- nist 14 shared controls
- least privilege 14 shared controls
- remote access 13 shared controls
- role based access control 12 shared controls
Frameworks that govern privileged access management
What the standards actually require on privileged access management
Requirements naming privileged access management across 6 standards, quoted from the control text.
Manage privileged access with Just-in-Time / Just-Enough-Administration through a PAM solution.
DODZT-1.4 · Privileged Access Management →Privileged access can severely damage stability and security, so privileged accounts should be granted only on need-to-use, with their activity logged and reviewed as part of ongoing monitoring;
monetary-authority-of-singapore-technology-risk-management-guidelines::9.2 · 9.2 Privileged Access Management →SIG risk domain H, Access Control. The third party's access control program ensures that only authorised users, services and devices are authenticated and reach data and systems, applying authentication strength, least privilege, segregation of duties, role-ba...
sig-shared-assessments::H · Control logical access across endpoints with authentication, least privilege and privileged access management →Privileged access is managed. The guide expects privileged access to be defined per infrastructure, network and application, privileged users identified, admin accounts kept off daily tasks, internet and email, default accounts disabled, hardened admin worksta...
saudi-nca-ecc::2-2-3-4 · 2-2-3-4 Privileged access management →Within the agency's Privileged Access Management (PAM) policy, agencies must set up robust procedures for suspending and revoking credentials.
new-zealand-information-security-manual-nzism::16.4.33.C.01 · 16.4.33.C.01 Privileged credential suspension and revocation procedures →Security Dimension 1 Access Control per X.805 Clause 6.1: Access Control guards network resources against use without authorization, admitting only authorized staff or devices to services, applications, information flows, stored information and network element...
X805-Dim1-Access-Control-RBAC-Authorization-Resources-Network-Elements-Services-Applications · ITU-T X.805 Security Dimension 1 - Access Control + Role-Based Access Control (RBAC) + Authorization + Resources + Network Elements + Services + Applications + Access Limitations + Authorized Personnel + Discretionary + Mandatory Access Control →Questions people ask about privileged access management
What is Privileged Access Management?
Why is Privileged Access Management important for compliance?
Which compliance frameworks address Privileged Access Management?
Where can I learn more about Privileged Access Management?
See how Privileged Access Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.