Technology Record - Issue 25: Summer 2022

21 Fastpath Solutions recently integrated its Access Risk Monitor with Microsoft's Azure Active Directory (AAD) Identity Governance platform. Fastpath identifies separation of duties violations and other access risks within access packages that are created within Entitlement Management, a component of AAD Identity Governance. Fastpath goes deep, looking at user access at the securable object level, so administrators can identify user access risks across multiple business applications before provisioning users. The company also ensures that only minimum access rights are granted to users, an area of focus among auditors and regulators. Frank Vukovits is director of strategic partnerships at Fastpath Solutions Fastpath Solutions integrates risk management with Microsoft VIEWPOINT: FRANK VUKOVITS NSA warns of increased threat of state-sponsored cyberattacks The US National Security Agency (NSA) has warned of an increase of state-sponsored malicious cyber activity targeting critical infrastructure. A joint cybersecurity advisory issued by the agency highlights destructive malware, ransomware, distributed denial-of-service attacks, and cyber espionage as specific threats which have the potential to take critical systems offline and even cause physical damage. It recommends that organisations patch all known vulnerabilities as a matter of urgency and suggests that other high-priority defence tactics could include implementing multifactor authentication, securing remote access, and training end users to recognise phishing, spear-phishing, and other attempts at social engineering. Center for Internet Security (CIS) has updated the mappings between its Azure Foundations Benchmark and Azure Security Benchmark to include a collection of high-impact cybersecurity recommendations. The new recommendations can be found in the references section of the CIS Azure Foundations Benchmark. The reference to the Azure Security Benchmark allows users to easily navigate to the guidelines and see the security controls and service baselines. Over 85 Azure services are covered by the service baselines, while the security controls consist of 11 domains included in Azure Security Benchmark v2. Anywhere365 is developing its new Partner Portal, having recently onboarded over 100 partners onto its Partnership Program, which was first launched in April 2022. The portal is currently in beta testing with a select group of key partners to enable Anywhere365 to seek feedback and tailor the system to be aligned exactly to a partner’s requirements. It aims to offer automated customer deployments and give partners access to all the information they need for training, marketing, support tickets and customer contracts. Anywhere365 prepares to launch its Partner Portal CIS Azure Foundations Benchmark updated with security recommendations

RkJQdWJsaXNoZXIy NzQ1NTk=