Michael Keane

In my 15 years at CyberArk, I never once referred to our solution as a legacy PAM. At the time, I didn’t think it was — but becoming a legacy solution isn’t something that happens overnight. It’s like watching a tree grow: you don’t notice it day by day, and then suddenly it’s towering above you. The dictionary defines a "legacy solution" as: "...a system, product, or technology that is still in use but is based on outdated architecture, design, or approaches compared to modern alternatives. It often continues to serve its core purpose, but it typically comes with limitations that make it less efficient, flexible, or scalable in today’s environment" That's a great and weirdly accurate generic description but there are also PAM specific features that I think need to be highlighted - here are my suggestions on what constitutes a legacy PAM solution: 🔒 They are vault centric. Legacy PAM is anchored around the concept of a single vault, where you store the "Keys to the Kingdom" You may see support of other secret stores but inevitably there will be a link back to "the vault" 🤷 User experience will seem like it's an afterthought. Legacy solutions are very seldomly user friendly - Unnecessary friction such as multiple and frequent authentication steps, multiple user interfaces, latency and anything that involves "checking out and then back in" a credential creates a sub-optimal user experience that leads to push back, animosity between teams and failed deployments. 🏗️ Heavy on services. Legacy PAM is a services money pit. The "deployed in weeks" promises from vendors doesn't mean "onboarded in weeks" I worked with the worlds largest Enterprises and "Windows and *nix deployed in years" would be a better description. Services are great when they get you to your goals quickly and efficiently but when you are trying to "fix the unfixable" they take on a different guise. 💰 Everything comes with a cost. A legacy solution will feel like a weight around your neck, with little hope of modernizing without significant licensing cost. You're paying maintenance or an annual subscription but access to that new feature or "modern" solution is going to come at a significant cost in licensing, infrastructure and services. They say the first step to recovery is recognizing you have a problem, if the points I've raised above seem familiar then perhaps it's time to look for a modern solution? PAM doesn't need to be difficult.

81

14 Comments

Every week, CISOs receive approximately 50+ vendor emails and 100+ calls seeking sales meetings, yet they report having 0 strategic conversations. As a result, many CISOs find themselves categorizing repetitive sales calls as spam and filtering sales emails into the same category. In my conversations with over 100 𝐂𝐈𝐒𝐎𝐬 this year, common grievances have come to light: “I do not require additional tools; I need more time.” “Most vendors emphasize fear without assisting me in building defenses.” “It’s all reactive. I want to lead.” The role of the CISO is increasingly recognized as a strategic position within an organization. CISOs have transitioned from being solely technical experts focused on security operations to becoming essential business leaders who significantly influence the strategic direction of their companies. The CISO's responsibilities have evolved into a strategic leadership role critical for organizational success. Consequently, CISOs seek advisors who understand their unique business challenges, assist in problem-solving, and work as partners in the path to becoming effective security advisors. #ciso #strategic #leader #technology #business

104

49 Comments

On July 31, we’re pulling back the curtain on cloud security. Most companies think their cloud is secure, but 67% say cloud firewalls aren’t effective, and only 8% use zero trust between clouds. Join Doug M., Enterprise Strategy Group (part of Omdia)‘s John Grady, and Alexandra Escalona, as they present the Cloud Native Security Fabric (CNSF) category—a new approach built for the next generation of threats from agentic AI to app modernization. Frictionless security at the speed of business. Register here: https://lnkd.in/eyW_2BpB Aviatrix #CloudNativeSecurityFabric #CNSF #CloudSecurity #ZeroTrust #MindtheGap #Aviatrix

65

2 Comments