PRIVILEGED IDENTITY MANAGEMENT NEWS LINE
August 2009

Top of Mind










Too Much Access is Never A Good Thing

Philip Lieberman, President 
Lieberman Software Corporation


Does it make sense that everyone in the IT department has unlimited and forever access to the CEO, CFO, CTO, Finance, Accounting, and R&D machines? 

Going one step further, does it make sense that former employees and contractors have this same access well after their employment and contracts have been terminated?

Strangely enough, many IT departments have no issues with this set of circumstances since changing the “way we do things here” would be seen as a disruption and “extra work”.

We believe that access to sensitive systems should be granted "on a time limited basis” with a “need to know”  where all access should be approved and audited. 

We make solutions to properly release passwords to authorized staff for authorized reasons, but it does require that some aspects of the IT culture change to accept the extra 30 seconds it takes to “get a password” rather than use a “shared password” known to everyone in IT. 

Is it worth doing?  Considering the consequences of sharing passwords and never changing privileged account passwords, is it worth losing the company to a financial loss or potential serious embarrassment just for the convenience of IT?

The core issue is that our technology is only a small part of a bigger change that needs to happen in many IT organizations so that a proper security posture is implemented for the safety and security of all employees.  Our technology helps, but it all starts with the idea that security and survival are more important than convenience.


Tech Tip of the Month

You probably already know that Account Reset Console
will allow your delegated users to securely reset their own account passwords. But did you also know that it can automatically locate and disable orphaned accounts, sealing off a potentially serious security vulnerability in your organization? Find out more here.

Lieberman Software Corporation
1900 Avenue of the Stars
Suite 425
Los Angeles, CA  90067
Liebsoft.com

(01) 310-550-8575

newsletter@liebsoft.com

Customer Snapshot: Micronas

Securing a multinational enterprise with more than 20 offices, 330 servers, 2,000 workstations, and 1,800 employees is a challenging job.  Micronas, a semiconductor manufacturer for major automotive electronics companies, maintains the security of its IT infrastructure through an efficient, well-trained staff and the use of carefully-selected security solutions from Lieberman Software.

The Situation:  Micronas required a privileged account management solution to provide unique, automatically updated passwords for each system.

The Solution:  
Micronas deployed Random Password Manager to automate all privileged account password management operations in the enterprise.

The Result:  Micronas now has secure control over the privileged accounts in its network with convenient, audited access to the passwords.

Paul Blenderman, Manager of Windows Systems and Infrastructure says, “We’re now happy with the security of our servers. We know that we can still access them if the domain trust ever fails, and Random Password Manager
runs smoothly without manual intervention. This product eliminates some of the worries of maintaining a secure and efficient infrastructure.”

Please click here to read the full story.
Partner News

Lieberman Software’s Integration of nCipher’s Hardware Security Module Revolutionizes Password Security

Lieberman Software’s Integration with Microsoft System Center Provides Powerful Controls to Ensure Regulatory Compliance 

Lieberman Software Signs Reseller Agreement with IBV Informatik AG
Reseller to Provide the Lieberman Software Privileged Identity Management and Security Management Solutions to European Market

We are quoted as an Oracle ISV Partner for Security on the release of Oracle 11g2R: "With our corporate and government customers now securing privileged identities on hundreds of thousands of computers, it's a natural choice for Lieberman Software's Enterprise Random Password Manager to run on Oracle 11g. Today Oracle 11g sets the standard for scalability, security, and 24/7 availability," says Philip Lieberman, President of Lieberman Software Corporation.

Product Updates / Launches

  • SNEAK PREVIEW: We are pleased to announce we are providing native support for the Oracle 11g database and Oracle Internet Directory in our upconming release of Enterprise Random Password Manager.
  • Four of our products have already earned the "Compatible with Windows 7" logo for independent software vendors. Having passed Microsoft tests for compatibility and reliability, the following products are ready to support  Windows 7 when it launches October 22nd: Enterprise Random Password Manager™, Random Password Manager™, User Manager Pro Suite™, and Service Account Manager™. 

Analysts / Press / Events

Congratulations Enterprise Random Password Manager on a 5-star review from SC Magazine! In the August 2009 issue there is a Group Test on Password Management. Reviewer Peter Stephenson says Lieberman Software's Enterprise Random Password Manager™ is extremely powerful, not complicated to install, easy-to-use, and more. Click here to read the full review.

  • Ulitzer, July 2009:  Founder and President of Lieberman Software, Philip Lieberman, will speak at Government IT Conference in October.
  • USA Today, July 2009:  "The unauthorized extraction of information is epidemic and essentially unstoppable," says Phil Lieberman, CEO of Lieberman Software, which makes password security systems.
  • Network World, July 2009:  "First, the always fascinating Phil Lieberman (founder and CEO of Lieberman Software) weighed in on our recent discussions. My position has been that in theory IDaaS makes sense. [But] I believe that the IDaaS model breaks down in many areas."
  • Security Matters, July 2009:  "The fundamental flaw with this practice is the serious security implications and regulatory compliance violations that occur if the local password on even one system is compromised."

Lieberman Software Corporation respects your right to privacy, and believes any information you provide us should be protected from disclosure to others. For more information, please read our privacy policy. If you do not wish to receive newsletters from Lieberman Software in the future, please click here .