Planning your Build Out
The key to a successful deployment and ultimately user adoption is proper planning.
Before you begin your build out process, please consider the following questions and scenarios.
-
What are you trying to accomplish with PAM? Do you plan on using your records for secure vaulting and sharing, session management, task automation or all the above?
-
Which (and how many) assets, accounts and secrets do you plan on securing within PAM?
-
Will PAM be used by a select group of power users like your IT Department or will it be rolled out across your entire organization?
-
How do you plan on categorizing your records in PAM so they can be easily found and managed? Organized by department, relationship, or geographies?
-
Are approval workflows (Dual Control, Four-eyes) required on any of your records?
-
Should users’ login with PAM local accounts or reuse their AD or LDAP accounts? Do you want to implement another layer of security by integrating with multi-factor or two-factor authentication?
-
Do you understand your “break glass” scenario?
Answering these questions and understanding your true objective prior to deploying PAM is crucial to starting out on the right foot.
This may require spending time interviewing your various stakeholders and colleagues, gathering requirements and of course collaborating with your team during this process.
While it is possible to change course after the product has been rolled out into production use, it is easier on everyone to start from a solid foundation and build upon it.
Let’s get started on building that solid foundation.