IT Brief Australia logo
Technology news for Australia's largest enterprises
Partner content
Story image

How to remove admin privileges without teeing people off

Tue 26 Oct 2021

Article by Devicie CEO and cofounder Martin McGregor.

Administrative privileges have long been a prickly subject between IT teams wanting to secure corporate networks and employees wanting to go about their jobs, hassle free.

The tricky nature of striking a balance between security and productivity often leads to a best-efforts approach which too often widens the security gap. But as the threat landscape continues to evolve, a best-efforts approach won’t cut it. The good news is there is now a way to get it right – and it isn’t hard to do.

The team at Devicie has many years of experience in helping organisations to protect sensitive data, comply with complex regulation and defend against cyber attacks. And the issue of admin privileges is one that comes up in almost every single project.

A breach waiting to happen

Organisations hoping to dodge a cyber bullet using traditional practices around local admin have some pretty big odds against them. 

The numbers speak for themselves: As far back as 2018, Forrester estimated at least 80% of security breaches involved privileged credentials. Last year Gartner estimated that by 2023, 75% of all cloud security failures would result from inadequate management of identities, access and privileges. 

From a security perspective, it’s easy to see why it’s so important to restrict admin privileges. It’s right up there on the ASD Essential 8 and the NIST Risk Management Framework. Giving any employee more privilege than they need to do their job is a mistake. It makes it easier for those permissions to be intentionally or accidentally misused, abused or hijacked. And, in the wrong hands, it’s all downhill from there. They can disable endpoint security and antivirus software, install malicious software, encrypt data with cryptolockers or even use the system to access and steal other company resources. These are all levers that can be leveraged to perform a ransomware attack.

Of course, restricting or removing admin privileges isn’t black and white. 

When security gets personal

When the topic of removing admin privileges comes up in conversation, it’s usually followed by a notable shift in the air. It’s human nature to take issue when something is taken away. Some individuals take the removal to imply they don’t have the smarts to use those privileges responsibly. Of course, this is not the case. The reality is IT can’t know with 100% certainty that someone with said privileges will not be successfully breached. 

Beyond the personal, when someone gets fewer permissions than they think they need (or actually need), they might struggle to do their job productively. And there may be times when some individuals temporarily require privileges for a specific task that falls outside of the standard policy.

Time meant for working might therefore be spent seeking support from an already overstretched IT team to gain permissions in what becomes a completely counterproductive game of hot potato. Eventually, someone drops the ball. Too often, IT administrators eventually decide that they can make the problem go away by granting privileges to a ‘trusted’ individual. Then another request comes along. Before long, there is privilege creep and a major visibility gap: no one knows who has privileged access or even what applications are running on certain devices. It’s a big security problem.

Research highlights the disconnect between security and productivity well. In a 2021 study from HP, 67% of IT leaders said they get ‘weekly’ complaints about restrictive policies while 48% of all workers felt these measures were a waste of time.

It might sound all doom and gloom, but with the right structure and policies, coupled with automated application management, there is a light at the end of the tunnel. 

How to make it easier

There is a future state that organisations can move to quickly, where abiding by the principle of least privilege – without the headache – is business as usual. 

In this environment, employees can access the applications they need to do their job productively, while IT has the automated controls and visibility to ensure uncompromising security, efficiency and ongoing compliance.

It may sound too good to be true, but it’s already happening and becoming increasingly necessary given the trajectory of the threat landscape.

Of course, organisations first need to weigh their requirements against the level of risk they can accept when considering admin privileges. This starts with getting the right people in a room to have a constructive conversation about the business needs and risks, and the policies, structure and tech needed to achieve an outcome that works for security without dismantling productivity.

There will be a multitude of reasons for granting exceptions across different organisations. Take the following examples: 

  • “Our developers need to experiment with different tool sets”
  • “Our IT team needs to set up a proof of concept”
  • “Our consultant needs to download something while on a client site on a weekend”
  • “Our PhD students need to try different modelling tools” 

While these reasons are unique, the framework to manage exceptions should be largely the same in every organisation.

Achieving this in the most efficient way requires the right mix of automation and a growth mindset. It requires the understanding that it is no longer acceptable to turn a blind eye to admin privileges, and that an agreement must be made on how best to manage it. 

By leveraging agentless, cloud-native technology, organisations have an opportunity to reinvent the way they manage administrative privileges altogether.

With the Devicie platform, for example, organisations are given access to a corporate company portal, which houses applications for employees to access. This enables automated management of all software, including operating systems and applications, so that only authorised software is installed and can execute, and that unauthorised and unmanaged software is prevented from installation or execution. This is all achieved without granting users extra privileges.

Not only does this eliminate the need for end users to have admin privileges, but it enables IT to have complete visibility and control over the applications residing on all employee devices. Gone is the need to worry about the security risks of rogue applications or the need to keep the peace with employees. They can do what they need to do without carrying the burden and risk of administrative access.

It’s the perfect win-win situation, for security and productivity.

Automation almost always makes sense, but if there’s one area where automation truly shines, it’s application management. And it’s the first point that Devicie addresses in the Essential Checklist to Automating Least Privilege. Download your copy to see how you can leverage automation to remove admin privileges in a way that supports a productive and efficient workforce.  

Related stories
Top stories
Story image
Employment
Tech job moves - Forcepoint, Malwarebytes, SolarWinds & VMware
We round up all job appointments from May 13-20, 2022, in one place to keep you updated with the latest from across the tech industries.
Story image
Migration
Let’s clear the cloud visibility haze with app awareness
Increasingly, organisations are heading for the cloud, initiating new born-in-the-cloud architectures and migrating existing applications via ‘lift and shift’ or refactoring.
Story image
Remote Working
Successful digital transformation in the hybrid work era is about embracing shifting goalposts
As organisations embraced remote working, many discovered they lacked the infrastructure needed to support history’s first global load test of remote work capabilities.
Story image
Vectra AI
Understanding the weight on security leader’s shoulders, and how to shift it
Millions of dollars of government funding and internal budgets are being funnelled into cybersecurity to build resilience against sophisticated threats, indicating how serious this issue has become.
Story image
Digital Transformation
The impact of COVID-19 on healthcare environments and care delivery
The COVID-19 pandemic has revolutionised the healthcare industry while overcoming staff shortages, social distancing requirements, and lockdowns.
Story image
Cybersecurity
Infoblox's State of Security Report spotlights Australian remote work hazards
Attackers exploit weak WiFi, remote endpoints, and the cloud, costing 50% of organisations over $1.3 million in breach damages.
Story image
Nozomi Networks
Nozomi Networks, Siemens reveal software integration
Nozomi Networks and Siemens have extended their partnership by embedding Nozomi Networks’ software into the Siemens Scalance LPE local processing engine.
Story image
Apple
Apple previews new features for users with disabilities
Apple says new software features that offer users with disabilities new tools for navigation, health and communication, are set to come out later this year.
Story image
Application Security
What are the DDoS attack trend predictions for 2022?
Mitigation and recovery are vital to ensuring brand reputation remains solid in the face of a Distributed Denial of Service (DDoS) attack and that business growth and innovation can continue.
Story image
Excel
Could your Excel practices be harming your business?
While Excel has been the de-facto standard for budgeting, planning, and forecasting, is it alone, enough to support organisations in the global marketplace that’s facing rapid changes due to digital transformation?
Story image
Digital Transformation
How to modernise legacy apps without compromising security
At a time when digital transformation has become central to business, even the most important applications come with a ‘use-by’ date.
Story image
SaaS
Rubrik Security Cloud marks 'next frontier' in cybersecurity
"The next frontier in cybersecurity pairs the investments in infrastructure security with data security giving companies security from the point of data."
Story image
Data Center
Preventing downtime costs and damage with Distributed Infrastructure Management
Distributed Infrastructure Management (DIM) can often be a lifeline for many enterprises that work with highly critical ICT infrastructure and power sources.
Story image
Data Protection
Barracuda launches new capabilities for API Protection
"Every business needs this type of critical protection against API vulnerabilities and automated bot attacks," Barracuda says.
Story image
Digital Transformation
The Huawei APAC conference kicks off with digital transformation
More than 1500 people from across APAC have gathered for the Huawei APAC Digital Innovation Congress to explore the future of digital innovation.
Story image
Sift
Sift shares crucial advice for preventing serious ATO breaches
Are you or your business struggling with Account Takeover Fraud (ATO)? One of the latest ebooks from Sift can provide readers with the tools and expertise to help launch them into the new era of account security.
Story image
Sustainability
Grasping the opportunity to rethink the metrics of a sustainable data centre
A data centre traditionally has two distinct operations teams: the Facility Operations team, and the IT Operations team. Collaboration between them is the key to defining, measuring, and delivering long-term efficiency and sustainability improvements.
Exabeam
Find out how a behavioural analytics-driven approach can transform security operations with the new Exabeam commissioned Forrester study.
Link image
Story image
Lightspeed
Lightspeed launches all-in-one marketing platform in A/NZ
ECommerce provider, Lightspeed has launched a new all-in-one marketing solution, Lightspeed Marketing & Loyalty in Australia and New Zealand.
Story image
Ransomware
Cybersecurity starts with education
In 2021, 80% of Australian organisations responding to the Sophos State of Ransomware study reported being hit by ransomware. 
Story image
Sustainability
Power at the edge: the role of data centers in sustainability
The Singaporean moratorium on new data center projects was recently lifted, with one of the conditions being an increased focus on power efficiency and sustainability.
Story image
Customer experience
Gartner recognises Okta for abilities in Access Management
Okta has announced it has been recognised as a Customers' Choice for the fourth time in a row in the Gartner Peer Insights "Voice of the Customer" report.
Story image
Apricorn
Data backup plans inadequate, data still at risk - study
The Apricorn 2022 Global IT Security Survey revealed that while the majority organisations have data backup plans in place, data for many are at risk.
Story image
Infrastructure
Nutanix study reveals financial services sector lagging with multicloud adoption
Nutanix has released new research that reveals the financial services sector is lagging behind when it comes to multicloud adoption.
Darktrace
Threat actors are exploiting weaknesses in interconnected IT/OT ecosystems. Darktrace illuminates your entire business and takes targeted action to stop emerging attacks.
Link image
Story image
Data solutions
South Australia state satellite makes significant progress
South Australia’s first state satellite has successfully completed the Critical Design Review (CDR), moving it closer to providing tangible data solutions.
Story image
Wireless
Cradlepoint expands its Cellular Intelligence capabilities
Cradlepoint has announced additional Cellular Intelligence capabilities with its NetCloud service.
Softiron
For every 10PB of storage run on HyperDrive vs. comparable alternatives, an estimated 6,656 tonnes of CO₂ are saved by reduced energy consumption alone over its lifespan. That’s the equivalent of taking nearly 1,500 cars off the road for a year.
Link image
Story image
Broadband
Telstra enters into new RSP agreement with Opticomm
Telstra has entered into an RSP agreement with Opticomm (A Uniti Group Limited subsidiary) to provide network fibre services to customers.
Story image
Customer experience
Research unveils precarious customer loyalty for retailers
New research has found customers are reassessing established brand loyalties as their priorities and behaviours shift.
Story image
Qualys
Qualys updates Cloud Platform solution with rapid remediation
The new update is designed to enable organisations to fix asset misconfigurations, patch OS and third-party applications, and deploy custom software.
Story image
Digital Transformation
Pluralsight and Ingram Micro Cloud team up on cloud initiative
Pluralsight has teamed with Ingram Micro Cloud to build upon cloud competence and maturity internally, and externally support partners’ capabilities.
Story image
Cybersecurity
A10 Networks finds over 15 million DDoS weapons in 2021
A10 Networks notes that in the 2H 2021 reporting period, its security research team tracked more than 15.4 million Distributed Denial-of-Service (DDoS) weapons.
Story image
Manufacturing
HINDSITE wins Aerospace Xelerated Pitch Challenge with solution to support Boeing
Brisbane-based startup HINDSITE was the winner of the first ever Pitch Challenge organised by Aerospace Xelerated in partnership with Queensland XR Hub. 
Story image
ChildFund
ChildFund launches new campaign to protect children online
ChildFund says WEB Safe & Wise aims to protect children from sexual exploitation and abuse online while also empowering them to become digitally savvy. 
Story image
trust
9/10 Aussies to stop spending if personal data compromised
"Based on the patterns we are seeing among Australian consumers, it is evident that trust in a brand is exceptionally important."
Story image
Artificial Intelligence
SAS announces new products amid cloud portfolio success
Analytics and AI company SAS is deepening its broad industry portfolio with offerings that support life sciences, energy, and martech.
Story image
Cloud Security
Aqua Security createa unified scanner for cloud native security
“By integrating more cloud native scanning targets into Trivy, such as Kubernetes, we are simplifying cloud native security."
Story image
Remote Working
Australia’s remote workers face connectivity and security issues
SOTI's new report finds better video conferencing technology and improved security measures are top concerns for remote workers in Australia.
Story image
Ransomware
A third of companies paying ransom don’t recover data - report
Veeam's report finds 76% of businesses who are victims of cyberattacks paid the ransom to recover data, but a third were still unable to get their information back.
Story image
Malware
New vulnerabilities found in Nuspire’s Q1 2022 Threat Report
“Threat actors are quickly adjusting their tactics and these exploits tend to get industry attention, but the threat posed by older and attacks still persists."
Story image
Artificial Intelligence
AI-based email security platform Abnormal Security valued at $4B
"A new breed of cybersecurity solutions that leverage AI is required to change the game and stop the rising threat of sophisticated and targeted email attacks."
Story image
Digital Transformation
Trading up: It's time to swap core systems for flexible digital applications
This year will see more oranisations planning and commencing high tech renovations that will shake up the way they operate.
Story image
Cybersecurity
More than 40% of banks worried about cloud security - report
Publicis Sapient's new report finds security and the lack of cloud skills and internal understanding of business benefits are big obstacles for banks moving to the cloud.