A further 15 per cent plan to implement this measure within three years
Netwrix, a cybersecurity vendor that facilitates data security, 590 IT asked whether and how they review user access permissions. The IS survey It was found that 90 per cent of organizations already periodically review access entitlements or plan to begin doing so within three years.
However, the majority of respondents (81 per cent) admit to doing access reviews manually.
“Manual review is the most unreliable and time consuming way to keep permits up to date,” says Joe Dibley, a security researcher at Netwrix. “An email or instant message from a department head confirming the access rights of internal or external auditors is usually unsatisfactory. In addition, this approach increases the chances of human error – it’s too easy to forget someone’s response or miss the email altogether. ”
In addition, in 41 percent of organizations, IT teams review users’ access rights not only manually but individually, with no involvement of business users.
“IT teams are generally unable to know exactly who needs access to IT resources. As a result, not only does the organization fail to properly enforce the minimum privilege, but the helpdesk is overwhelmed by requests from business users and data owners to update access rights, ”said Dibley.
Respondents who already have a dedicated tool for reviewing users’ access rights were then asked what they felt was the biggest advantage of this solution. 49 per cent cited risk reduction and 28 per cent opted for time savings.
“Automated access reviews reduce cybersecurity risks directly, by ensuring regular updating of user rights – and also indirectly: by eliminating manual tasks, frees up IT teams to focus on other critical activities, such as investigating security incidents before violations, ”says Dibley. .
Netwrix makes data security easy, simplifying how professionals can control sensitive, controlled and critical business data, regardless of where they live. More than 11,500 organizations worldwide rely on Netwrix solutions to secure sensitive data, realize the full business value of enterprise content, pass compliance audits with less effort and cost, and the productivity of IT and IT teams. -increase knowledge workers.
Founded in 2006, Netwrix has earned more than 150 industry awards and has been named to Inc. listings. 5000 and Deloitte Technology Fast 500 of the fastest growing companies in the US.
For more information, visit www.netwrix.com.
75 per cent of organizations strengthen their cybersecurity posture through regular access reviews –
Source link 75 per cent of organizations strengthen their cybersecurity posture through regular access reviews –