BR +55 11 3069 3925 | USA +1 469 620 7643

  • BLOG
  • Português
  • BR +55 11 3069 3925 | USA +1 469 620 7643
  • Português
logo senhasegura
  • SOLUTIONS
  • PRODUCTS
  • SERVICES AND SUPPORT
  • PARTNERS
  • COMPANY
  • CONTACT
  • DEMO

Compliance

and Audit

Audit

PCI DSS

SOX

ISO 27001

HIPAA

NIST

GDPR

ISA 62443 |

Industry 4.0

Security and

Risk Management

Privilege Abuse

Third Party Access

Privileged Access Recording

Insider Threat

Data Theft Prevention

Hardcoded Passwords

Password Reset

Solutions

By Industry

Energy and Utilities

Financial

Government

Health Care

Legal

Telecoms

Retail

senhasegura

Testimonials

See Testimonials

360º Privilege Platform

Account and

Session

PAM Core

Domum

Remote Access

MySafe

GO Endpoint

Manager

GO Endpoint

Manager Windows

GO Endpoint

Manager Linux

DevOps Secret

Manager

DevOps Secret

Manager

Multi

Cloud

Cloud IAM

Cloud Entitlements

Certificate

Manager

Certificate

Manager

Privileged

Infrastructure

PAM Crypto Appliance

PAM Load Balancer

Delivery : On Cloud (SaaS) | On-premises | Hybrid

Services

and Support

Documentation

Solution Center

Suggestions

Training and Certification

Deployment and Consulting

PAMaturity

PAM 360º

Support Policy

senhasegura

Resources

Rich Materials

Customer Cases

Webinars Calendar

senhasegura Stickers

BLOG

CONTENT

Is your company really prepared for a cyber attack?

The Pillars of Information Security

7 signs that your company needs to improve the security of sensitive data

See more articles about cybersecurity

Technical

Information

How it works

Product Archicture

Integration

Security

High availability and contingency

Privileged Auditing (Configuration)

Privileged Change Audit

Features and

Functionalities

ITSM Integration

Behavior Analysis

Threat Analysis

Privileged Information Protection

Scan Discovery

Task Management

Session Management (PSM)

Application Identity (AAPM)

SSH Key Management

Affinity Partner

Program

About the Program

Become a Partner

MSSP Affinity Partner Program

Security Alliance Program

Academy | E-learning for Certification

Affinity

Portal

Portal dedicated only for Partners to find commercial, marketing supporting materials and certification program of senhasegura.

Access Partner Portal

Opportunity

Booking

For our Commercial Team to support your sale more effectively, request your opportunity booking here.

Opportunity Booking Request

Find a

Partner

We work together to offer a better solution for your company.

Check all senhasegura partners

About

Company

About us

Achievements

Why senhasegura

Press Release

Press Room

Events

Career

Presence in the World

Terms of Use

End User License Agreement (EULA)

Privacy and Cookie Policy

Information Security Policy

Certification at senhasegura

senhasegura

Testimonials

See Testimonials

Latest Reports

and Awards

KuppingerCole Leadership Compass Report for PAM 2023

Frost & Sullivan Customer Value Leadership Award 2022

Gartner PAM Magic Quadrant 2021 Report

KuppingerCole Leadership Compass: PAM 2021

GigaOm Radar Report 2021

Gartner PAM Magic Quadrant 2020

Gartner Critical Capabilities for PAM 2020

Information Services Group, Inc. (ISG)

KuppingerCole Leadership Compass: PAM 2020

Contact our team

Request a Demonstration

PASM x PEDM – How to choose the best approach for your business?

by senhasegura Blog Team | Dec 17, 2020 | BLOG

For the second year in a row, Privileged Access Management (PAM) is listed as one of Gartner’s top security priorities. Although they have been around for decades, PAM tools are increasingly vital as access privileges become more complex. In fact, experts predict that more than two-thirds of companies will implement privileged access management on their assets in the coming years.

Due to the evolution of PAM, Gartner has established two additional classifications to highlight the different approaches on PAM solutions. Thus, there are Privileged Account and Session Management (PASM) and Privileged Elevation and Delegation Management (PEDM). Both approaches make use of the principle of least privilege, which establishes that users only have the access required for performing their tasks. While these approaches serve the same purpose, PASM and PEDM differently implement the mechanisms for how privileged user accounts are protected and accessed. 

Check below the main resources offered by PASM and PEDM solutions and understand the benefits of each approach for your business.

Key features of PASM solutions

PASM solutions allow privileged account credentials to be securely created and distributed exclusively by the solution. This mechanism is similar to the operation of a password vault. Thus, when users need to access a specific server or system, they request access and receive a temporary account with relevant privileges. This access account is valid for a single session only and all session activities are monitored and recorded.

It is important to pay attention to whether the features offered by the PASM solutions on the market encompass the main features of this approach, therefore, we have listed below the essential features present in PASM solutions:

  • Password vault: A password vault with encryption is required for secure storage of privileged account credentials, such as private keys and passwords.
  • Single session: A single session must be established for each privileged user in order to ensure better visibility of their actions.
  • Real-time session monitoring: It is necessary to have a real-time view of privileged sessions to monitor and terminate suspicious activity or unauthorized sessions.
  • Session recording and playback: all privileged sessions must be recorded, stored, and ordered in a simple way for searching.
  • Regular change of passwords: It is a good practice to change passwords at specified timeframes (weekly, monthly, or quarterly) or after specific events (such as security incidents).
  • Access control for shared accounts: Access to shared accounts can be granted based on additional approvals defined in the approval flow or the use of highly trusted multi-factor authentication (MFA).
  • Auditing and reporting capabilities: A PASM solution must have the auditing and reporting capabilities to provide detailed information on privileged accounts and their activities.

Main benefits of PEDM solutions

Instead of using accounts with temporary privileges (such as PASM solutions), PEDM solutions distribute access privileges according to users’ job roles. Thus, PEDM solutions define who can access the systems, as well as what can be done with such access.

Below, we describe how the main features of a PEDM solution contribute positively to the good use of Privileged Access Management (PAM):

  • Strengthening the principle of least privilege: PEDM solutions are able to reduce the risks of privileged access, because privileges are granted at a granular level, with the ability to assign specific privileges to a user to perform a certain action. Also, PEDM tools apply the concept of privilege segregation, establishing a security context for systems and processes, instead of being performed by the user.
  • Critical systems: the use of PEDM allows the protection of critical systems through local system session and application control and process management. That is, it is possible to develop workflows combined with the user’s access and required privileges. 

How to choose between PASM and PEDM for your business?

When it comes to cybersecurity, one cannot choose a single definition, as the various components of your infrastructure may require different solutions. Solutions like password vaults often work best for individual applications, but critical infrastructures like a server environment require a PEDM solution. Therefore, we will compare how PASM and PEDM solutions implement the principles of Privileged Access Management (PAM) so that you can understand what can work best for your business. 

PASM PEDM
Privilege PASM tools make use of a “hit-or-miss” strategy when it comes to privileges. This is because standard user accounts do not have administrative privileges, but shared accounts have full administrative access. Users are required to go through an approval workflow to use one of these shared accounts. Meanwhile, PEDM makes use of granular access controls to grant users only the required privilege according to their profile or job role. Each role is given limited privileges based on the expected use of the company’s environment. 
Accounts and Passwords PASM establishes shared accounts that have full administrative privileges. Since these accounts are not owned by a single user, they are available when someone needs additional access. To keep the entire process secure, users do not have access to the shared account password, and each time, a new session is started when someone uses the account.  PEDM tools, on the other hand, focus on standard user accounts. Users gain access through their own accounts by using their normal password.
Monitoring Because PASM tools allow users to have full administrative access for a limited period, each session is carefully monitored. But since no user has full administrative privileges, monitoring is less critical for PEDM tools. 

Both approaches are complementary and, therefore, it is recommended to implement PASM and PEDM tools simultaneously within the same company. However, the most reasonable thing to do is start with just one set of tools. As such, PASM solutions are most recommended for the initial implementation of PAM, as they help establish a solid foundation. Nevertheless, as a company grows in size and technology, a PEDM will help maintain and strengthen this foundation. 

senhasegura, one of the best among PASM and PEDM solutions 

Gartner, one of the most respected technology research and consulting institutions in the world, has recently released a new report called Critical Capabilities for PAM, in which PAM technologies and their ability to run and provide the functionalities needed for the cybersecurity universe are assessed. The document that assesses the three critical pillars of PAM (PASM, PEDM, and Secret Management) placed senhasegura in the top 3, among the main global companies that offer these resources.

This is an important report for all cybersecurity managers and experts to know the technical requirements of the PAM tools offered by the main vendors worldwide. Access the link and download the document today.

← Learn how to protect your company from insider threats We are a Great Place to Work →

$13 million growth investment drives senhasegura’s expansion in North America and the Middle East

Written by Priscilla Silva São Paulo, March 10, 2023 - senhasegura, an award-winning Privileged Access Management (PAM) solution provider that protects corporate IT environments and critical resources from cyber threats, announces a $13 million funding round from...
Read More

senhasegura wins CyberSecured 2022 award as best PAM solution in the USA

Written by Priscilla Silva SÃO PAULO, February 28 of 2023 - The 2022 edition of the CyberSecured awards, promoted by Security Today magazine, a brand of 1105 Media's Infrastructure Solutions Group, elected senhasegura as the winner in the Privileged Access Management...
Read More

How User and Entity Behavior Analytics Helps Cybersecurity

Cyberattacks are increasingly sophisticated, making traditional digital security tools insufficient to protect organizations from malicious actors. In 2015, Gartner defined a category of solutions called User and Entity Behavior Analytics (UEBA).Its big advantage is...
Read More

Best Practices for Consolidating Active Directory

This article was developed especially for you, who have questions about the best practices for consolidating Active Directory. First of all, you need to understand that directory services have the role of organizing important information for companies in a centralized...
Read More

senhasegura introduces the “Jiu-JitCISO” concept to show the power of Brazilian cybersecurity

Written by Priscilla Silva São Paulo, January 13, 2023 - "Like Jiu-Jitsu senhasegura is about self-defense. Every company must know how to protect itself and its clients". This is the aim based on the philosophy of the Japanese martial art, but made popular and...
Read More
Copyright 2023 senhasegura | All Rights Reserved | Powered by MT4 Group