Just-in-time access and privileged access management

Privileged accounts, such as domain administrators, root, database administrators, cloud owners and service accounts with broad rights, are the keys attackers want most. With them an intruder can disable defenses, create backdoor accounts, read any data and erase evidence. Privileged access management (PAM) is the set of processes and tools that discovers, secures, limits and monitors these accounts. Just-in-time access is one of its most effective techniques. PAM matters to auditors as well as defenders, because regulations and frameworks commonly require evidence that privileged use is approved, limited and reviewed.