SPI: Centrify Professional Services are “Best of the Best”

Today, leading technology services research firm SPI named Centrify a 2017 Best-of-the-Best professional services organization. We were among 21 selected from a field of over 400 companies. SPI is a global research, consulting and training company that helps professional service organizations improve profit and productivity. The company’s PS Maturity Model™ planning and management framework has become the industry standard for service organizations. According to SPI, a key characteristic shared by this year’s winners was something Centrify genuinely strives for: A unique, employee-centric culture in an ethical work environment focused on customer satisfaction. It’s not easy to build, but it is…

What’s Next from Google Cloud: Scenes from Google Next

Google Cloud last week had their big event in San Francisco, gathering Partners, customers and Googlers alike to talk about Google Cloud and its bright future. Centrify was proud to sponsor this event, and we had a presence in the Partner Playground, which allowed us to visit with hundreds of Google Next attendees to understand what they were doing with Google Cloud. Of course we spoke with Centrify customers, Google customers and some prospective customers, but interestingly, most of these conversations were with those who are already using software as a service (SaaS) or identity as a service (IDaaS) today….

Modernizing Legacy Apps to Boost Security: Part II

As we discussed in part I of this article, many companies are still in the process of modernizing their legacy apps. There are a number of reasons to do this, but securing your environment is typically the main goal. We’ve already identified that a (software) token-based system as essential. Let’s continue with a couple more best practices. Provide for User Provisioning An application needs user data — not for authentication, but because it needs to know the role and responsibilities of the person logging in so that privileges inside the app can be managed and regulated. Therefore, a database of…

Gartner: Centrify Scores Highest for Workforce to SaaS Use Case

Gartner just released its “Critical Capabilities for Identity and Access Management as a Service” report, and we are proud to see that Centrify has scored the highest in the “Workforce to SaaS” use case. We believe this validates our unique ability to secure access to apps and infrastructure from any device for all users. Please have a look at a complimentary copy of the full report to see for yourself. Gartner defines the “Workforce to SaaS” use case as: …primarily driven by the need to extend basic IAM functions and serve employees accessing SaaS applications. We’re especially proud of this…

Shared Account Password Management in the Federal Government: Then and Now

One of my first consultant jobs involved installing agents on Unix servers, a procedure which required root access. I still remember the first time I was onsite at a military base to help a customer install the software because it was also my first experience with a physical vault that stored computer passwords. When it came time to enter in the root credentials, my client made a phone call, and then this other person comes in from down the hall, opens up a wall safe using a memorized combination and pulls out a folder. This person verifies my client’s badge…

Top 3 Takeaways from the 2016 Cyber Security Study by Wells Fargo Insurance

Wells Fargo Insurance released their 2016 Cyber Security Study this week. Over 100 decision makers at companies with at least $100 million in annual revenue were surveyed to better understand perceptions of network security and data privacy vulnerabilities and related business exposures and risks. Three interesting takeaways from this study include: Takeaway #1: The Rise of Imposter Fraud Whether you call it CEO fraud, fraudulent inducement, social engineering fraud or business e-mail compromise scams, 21% of respondents have been targets of impostor fraud. Unfortunately, most suffered a financial loss, and often a significant one ($500k+). In fact, in April 2016,…

The “Grand Slam” of Identity and Access Management (IAM) Solutions

It’s summer and the sports of tennis and golf are enjoying their “grand slam” and “major” events (e.g. Wimbledon in tennis and the British Open in golf). Which got me thinking ― is there an equivalent set of “majors” for the Identity and Access Management market? The two major independent analyst firms in the IT industry — Gartner and Forrester ― spend a lot of time in the identity space, with Gartner publishing various Magic Quadrants and Forrester with its Waves. Magic Quadrants and Waves both measure a company’s current offerings, its strategy, as well as their market presence in…

Misuse of Privileged Credentials Now Involved in 80% of Data Breaches

Recently the respected analyst firm Forrester released its “Wave” for the privileged identity management (PIM) market. Centrify is quite proud to be recognized as a leader in the Forrester Wave (in fact we are the “furthest to the right”), and you can request a complimentary copy of the report here and see our analysis of the report here. But, what really jumped out at me was that the report documented how pervasive the misuse of privileged credentials are in data breaches. In this blog I will discuss what PIM is, what are some of the key findings of the Forrester report…

Securing Enterprise Identities For Dummies, Part 2

In part one of Securing Enterprise Identities For Dummies, we covered how the traditional network perimeter is inadequate for today’s apps and infrastructure which are increasingly cloud and mobile. We also covered steps to securing enterprise identities so that any user can obtain secure access to any resource. These steps included: Taking stock of your existing enterprise users, apps and infrastructure Considering the role of identity in cybersecurity Architecting security using identity Deploying an identity platform for security Part 1 of this blog concluded that an identity platform can provide you with a unified and integrated set of tools, auditing, reporting…

Identity-as-a-Service Crosses the Chasm

Last week Gartner released its “Top 10 Security Predictions” for 2016, and what caught my eye was prediction #6 that said “By 2019, 40% of IDaaS implementations will replace on-premises IAM implementations, up from 10% today.” This is an interesting prediction, because it has been a common perception that Identity-as-a-Service (“IDaaS”) deployments have historically attached to net new infrastructure and apps within organizations (e.g. enabling single sign-on, MFA, and provisioning for relatively new deployments of SaaS apps such as Office 365, ServiceNow, Box, Dropbox, etc.). Which in turn meant that customers have typically left their pre-existing Identity and Access Management…