Cyber Defense eMagazine March Edition for 2022

By combing the Principle of Least Privilege with Zero Standing Privilege and Just-In-Time
administration, companies ensure:
• Measurable reduction of attack surfaces by reducing privilege sprawl, making it less likely,
if not impossible, to hack additional privileged credentials
• The prevention of lateral movement, due to the absence of persistent admin accounts on
other systems; if a privilege credential attack does occur, it is contained to a single system
• Further reduction of risk by using MFA and on-demand, real-time provisioning and
deprovisioning of access as and when required for the task at hand
• Protection from insider threats by reducing the likelihood and impact of employee
negligence or intended error by leveraging unnecessary access
• More effective incident response actions by removing admin accounts during an event,
stopping any ongoing incident from installing malware on other systems or proliferating
on the network
• Collectively, these benefits enable governance of privilege and increase maturation
toward Zero Trust
While the Principle of Least Privilege is an important starting point for organizations, it remains
incomplete or is weakened by ignoring the element of time. The practice of Zero Standing
Privilege and Just-In-Time administration adds the time-based protective layer companies need
at entry points and to prevent lateral movement malicious actors use to readily attack and breach
their systems today.
About the Author
Raj Dodhiawala, President, Remediant, Inc. Raj Dodhiawala
has over 30 years of experience in enterprise software and
cybersecurity, primarily focused on bringing disruptive
enterprise products to new markets. Currently serving as
President of Remediant, he is bringing focus, agility and
collaboration across sales, marketing, finance and operations
and leading the company through its next phase of growth.
Raj Dodhiawala can be reached online (LinkedIn,) and at our
company website, https://www.remediant.com
Cyber Defense eMagazine – March 2022 Edition 108
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.