{"id":9219,"date":"2024-07-22T16:04:56","date_gmt":"2024-07-22T14:04:56","guid":{"rendered":"https:\/\/www.idstory.com\/?p=9219"},"modified":"2024-07-22T16:42:28","modified_gmt":"2024-07-22T14:42:28","slug":"idstory-a-efektivni-sprava-privilegovanych-uctu-pam","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/idstory-a-efektivni-sprava-privilegovanych-uctu-pam\/","title":{"rendered":"IdStory a efektivn\u00ed spr\u00e1va privilegovan\u00fdch \u00fa\u010dt\u016f (PAM) v CyberArk"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"9219\" class=\"elementor elementor-9219\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5281fe16 e-flex e-con-boxed e-con e-parent\" data-id=\"5281fe16\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-341144a4 elementor-widget elementor-widget-text-editor\" data-id=\"341144a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<span style=\"font-weight: 400;\">V modern\u00edch organizac\u00edch je spr\u00e1va identit a p\u0159\u00edstup\u016f (Identity Management, IdM) kl\u00ed\u010dovou sou\u010d\u00e1st\u00ed zabezpe\u010den\u00ed informa\u010dn\u00edch syst\u00e9m\u016f. Vedle b\u011b\u017en\u00fdch u\u017eivatelsk\u00fdch \u00fa\u010dt\u016f existuj\u00ed i privilegovan\u00e9 \u00fa\u010dty, kter\u00e9 maj\u00ed v\u00fdrazn\u011b vy\u0161\u0161\u00ed pr\u00e1va a jejich\u017e kompromitace m\u016f\u017ee m\u00edt katastrof\u00e1ln\u00ed d\u016fsledky. Z tohoto d\u016fvodu se st\u00e1le v\u00edce prosazuje spr\u00e1va privilegovan\u00fdch \u00fa\u010dt\u016f (Privileged Account Management, PAM). Jak spolu tyto dva koncepty souvisej\u00ed a jak mohou spole\u010dn\u011b zv\u00fd\u0161it bezpe\u010dnost a efektivitu organizac\u00ed? Poj\u010fme se na to pod\u00edvat.<\/span>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e2782fc e-flex e-con-boxed e-con e-parent\" data-id=\"e2782fc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2606316 elementor-widget elementor-widget-text-editor\" data-id=\"2606316\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2><b>Co je IdM a jak funguje?<\/b><\/h2><p><span style=\"font-weight: 400;\">IdM slou\u017e\u00ed k \u0159\u00edzen\u00ed \u017eivotn\u00edho cyklu identit a p\u0159\u00edstup\u016f u\u017eivatel\u016f v r\u00e1mci organizace. Jeho funkce zahrnuj\u00ed:<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Zalo\u017een\u00ed identity<\/b><span style=\"font-weight: 400;\">: Personalist\u00e9 zadaj\u00ed u\u017eivatele do HR syst\u00e9mu, IdM na\u010dte informace a zalo\u017e\u00ed u\u017eivatelskou identitu.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Spr\u00e1va p\u0159\u00edstup\u016f<\/b><span style=\"font-weight: 400;\">: U\u017eivatel\u00e9 mohou \u017e\u00e1dat o p\u0159\u00edstupy do r\u016fzn\u00fdch syst\u00e9m\u016f, kter\u00e9 jsou schvalov\u00e1ny nebo zam\u00edt\u00e1ny.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Deaktivace \u00fa\u010dt\u016f<\/b><span style=\"font-weight: 400;\">: P\u0159i odchodu u\u017eivatele z organizace IdM automaticky odstran\u00ed nebo deaktivuje jeho \u00fa\u010dty.<\/span><\/li><\/ul><p><span style=\"font-weight: 400;\">Tento proces je kl\u00ed\u010dov\u00fd pro b\u011b\u017en\u00e9 zam\u011bstnaneck\u00e9 a externistick\u00e9 \u00fa\u010dty, ale co privilegovan\u00e9 \u00fa\u010dty?<\/span><\/p><h2><b>Privilegovan\u00e9 \u00fa\u010dty a jejich v\u00fdznam<\/b><\/h2><p><span style=\"font-weight: 400;\">Privilegovan\u00e9 \u00fa\u010dty maj\u00ed zvl\u00e1\u0161tn\u00ed pr\u00e1va, nap\u0159\u00edklad m\u011bnit nastaven\u00ed syst\u00e9mu, modifikovat data nebo m\u011bnit opr\u00e1vn\u011bn\u00ed a hesla. Jejich zneu\u017eit\u00ed m\u016f\u017ee organizaci v\u00fdrazn\u011b po\u0161kodit. Zn\u00e1m\u00fdm p\u0159\u00edkladem je hack SolarWinds v roce 2020, kdy \u00fato\u010dn\u00edci z\u00edskali p\u0159\u00edstup k servisn\u00edm \u00fa\u010dt\u016fm a naru\u0161ili v\u00fdrobn\u00ed linku softwaru. Proto je nezbytn\u00e9 privilegovan\u00e9 \u00fa\u010dty monitorovat a \u0159\u00eddit jejich p\u0159\u00edstup.<\/span><\/p><h2><b>PAM: Bankovn\u00ed trezor pro digit\u00e1ln\u00ed cennosti<\/b><\/h2><p><span style=\"font-weight: 400;\">PAM poskytuje bezpe\u010dn\u00e9 \u00falo\u017ei\u0161t\u011b pro citliv\u00e9 informace, jako jsou hesla a p\u0159\u00edstupov\u00e9 kl\u00ed\u010de k d\u016fle\u017eit\u00fdm \u00fa\u010dt\u016fm a syst\u00e9m\u016fm. P\u0159edstavme si PAM jako <\/span><b>bankovn\u00ed trezor<\/b><span style=\"font-weight: 400;\">: banka ukl\u00e1d\u00e1 cennosti sv\u00fdch klient\u016f do nedobytn\u00e9ho trezoru, ke kter\u00e9mu maj\u00ed p\u0159\u00edstup pouze opr\u00e1vn\u011bn\u00e9 osoby pod drobnohledem kamer. Stejn\u011b tak PAM zaji\u0161\u0165uje, \u017ee citliv\u00e9 informace jsou bezpe\u010dn\u011b ulo\u017een\u00e9 a p\u0159\u00edstupn\u00e9 pouze za p\u0159esn\u011b definovan\u00fdch podm\u00ednek.<\/span><\/p><h2><b>\u00daskal\u00ed spr\u00e1vy privilegovan\u00fdch \u00fa\u010dt\u016f<\/b><\/h2><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Privilegovan\u00fd \u00fa\u010det mus\u00ed vzniknout, zaniknout a b\u00fdt za\u0159azen ve spr\u00e1vn\u00fdch skupin\u00e1ch.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Mus\u00ed b\u00fdt ulo\u017een do sejfu v PAMu ve spr\u00e1vn\u00fd okam\u017eik.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">U\u017eivatel mus\u00ed um\u011bt pracovat s privilegovan\u00fdm \u00fa\u010dtem, co\u017e vy\u017eaduje opr\u00e1vn\u011bn\u00ed.<\/span><\/li><\/ol><p><span style=\"font-weight: 400;\">K zalo\u017een\u00ed privilegovan\u00e9ho \u00fa\u010dtu je pot\u0159eba administr\u00e1tor, kter\u00fd provede \u0159adu krok\u016f v r\u016fzn\u00fdch syst\u00e9mech, co\u017e m\u016f\u017ee b\u00fdt \u010dasov\u011b n\u00e1ro\u010dn\u00e9 a vy\u017eaduje mnoho lidsk\u00fdch zdroj\u016f.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7ca5e99 e-flex e-con-boxed e-con e-parent\" data-id=\"7ca5e99\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c535aa7 elementor-widget elementor-widget-image\" data-id=\"c535aa7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"450\" src=\"https:\/\/www.idstory.com\/wp-content\/uploads\/2024\/07\/pam-1024x576.png\" class=\"attachment-large size-large wp-image-9226\" alt=\"\" srcset=\"https:\/\/www.idstory.com\/wp-content\/uploads\/2024\/07\/pam-1024x576.png 1024w, https:\/\/www.idstory.com\/wp-content\/uploads\/2024\/07\/pam-300x169.png 300w, https:\/\/www.idstory.com\/wp-content\/uploads\/2024\/07\/pam-768x432.png 768w, https:\/\/www.idstory.com\/wp-content\/uploads\/2024\/07\/pam-1536x864.png 1536w, https:\/\/www.idstory.com\/wp-content\/uploads\/2024\/07\/pam.png 1920w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2b8dd8d e-flex e-con-boxed e-con e-parent\" data-id=\"2b8dd8d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-59d962b elementor-widget elementor-widget-text-editor\" data-id=\"59d962b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2><b>Integrace IdM s PAM: P\u0159\u00edpadov\u00e1 studie<\/b><\/h2><p><span style=\"font-weight: 400;\">U na\u0161ich z\u00e1kazn\u00edk\u016f jsme \u0159e\u0161ili tyto v\u00fdzvy integrac\u00ed IdM syst\u00e9mu IdStory s CyberArk PAM. Co tato integrace umo\u017e\u0148uje?<\/span><\/p><ul><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Automatizace proces\u016f<\/b><span style=\"font-weight: 400;\">: U\u017eivatel po\u017e\u00e1d\u00e1 o roli v IdM, co\u017e spust\u00ed automatick\u00fd proces, kter\u00fd zalo\u017e\u00ed privilegovan\u00fd \u00fa\u010det v koncov\u00e9m syst\u00e9mu, vytvo\u0159\u00ed osobn\u00ed sejf v PAMu a nastav\u00ed pot\u0159ebn\u00e1 opr\u00e1vn\u011bn\u00ed.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>\u00daspora \u010dasu a zdroj\u016f<\/b><span style=\"font-weight: 400;\">: Cel\u00e1 rutina, kterou by jinak prov\u00e1d\u011bli administr\u00e1to\u0159i, je automatizovan\u00e1 a ihned provedena. To \u0161et\u0159\u00ed \u010das a sni\u017euje n\u00e1klady na licence pro administr\u00e1tory PAMu.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Zv\u00fd\u0161en\u00ed bezpe\u010dnosti<\/b><span style=\"font-weight: 400;\">: PAM monitoruje a audituje pou\u017e\u00edv\u00e1n\u00ed privilegovan\u00fdch \u00fa\u010dt\u016f, zat\u00edmco IdM audituje, kdo m\u011bl kdy jak\u00fd \u00fa\u010det a jak\u00e1 opr\u00e1vn\u011bn\u00ed byla nastavena. T\u00edm je zaji\u0161t\u011bna kontrola a bezpe\u010dnost cel\u00e9ho procesu.<\/span><\/li><\/ul><h2><b>Z\u00e1v\u011br<\/b><\/h2><p><span style=\"font-weight: 400;\">Integrace IdM a PAM p\u0159in\u00e1\u0161\u00ed mnoho v\u00fdhod, od \u00faspory n\u00e1klad\u016f a \u010dasu po zv\u00fd\u0161en\u00ed celkov\u00e9 bezpe\u010dnosti organizace. Automatizace spr\u00e1vy privilegovan\u00fdch \u00fa\u010dt\u016f sni\u017euje riziko lidsk\u00fdch chyb a zaji\u0161\u0165uje, \u017ee v\u0161echny procesy jsou transparentn\u00ed a auditovateln\u00e9. V dne\u0161n\u00edm digit\u00e1ln\u00edm sv\u011bt\u011b je takov\u00e1 integrace nezbytn\u00fdm krokem k udr\u017een\u00ed vysok\u00e9ho standardu informa\u010dn\u00ed bezpe\u010dnosti.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bf54477 e-flex e-con-boxed e-con e-parent\" data-id=\"bf54477\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a0d5441 elementor-align-left custom-button  elementor-widget elementor-widget-button\" data-id=\"a0d5441\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/demo.idstory.com\/\" target=\"_blank\" rel=\"noopener\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"27\" height=\"27\" viewBox=\"0 0 27 27\"><g id=\"Group_23\" data-name=\"Group 23\" transform=\"translate(-653 -835.648)\"><g id=\"Ellipse_4\" data-name=\"Ellipse 4\" transform=\"translate(653 835.648)\" fill=\"none\" stroke=\"#fff\" stroke-width=\"1\"><circle cx=\"13.5\" cy=\"13.5\" r=\"13.5\" stroke=\"none\"><\/circle><circle cx=\"13.5\" cy=\"13.5\" r=\"13\" fill=\"none\"><\/circle><\/g><path id=\"arrow-right\" d=\"M10.866,7.163a.557.557,0,1,0-.788.788l1.278,1.278h-9.8a.557.557,0,0,0,0,1.114h9.8l-1.278,1.278a.557.557,0,0,0,.788.788L13.1,10.18a.557.557,0,0,0,0-.788Z\" transform=\"translate(658.929 839.659)\" fill=\"#fff\"><\/path><\/g><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Vyzkou\u0161et DEMO<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e847898 elementor-align-left custom-button  elementor-widget elementor-widget-button\" data-id=\"e847898\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/www.idstory.com\/cs\/kontakt\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t<span class=\"elementor-button-icon\">\n\t\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"27\" height=\"27\" viewBox=\"0 0 27 27\"><g id=\"Group_23\" data-name=\"Group 23\" transform=\"translate(-653 -835.648)\"><g id=\"Ellipse_4\" data-name=\"Ellipse 4\" transform=\"translate(653 835.648)\" fill=\"none\" stroke=\"#fff\" stroke-width=\"1\"><circle cx=\"13.5\" cy=\"13.5\" r=\"13.5\" stroke=\"none\"><\/circle><circle cx=\"13.5\" cy=\"13.5\" r=\"13\" fill=\"none\"><\/circle><\/g><path id=\"arrow-right\" d=\"M10.866,7.163a.557.557,0,1,0-.788.788l1.278,1.278h-9.8a.557.557,0,0,0,0,1.114h9.8l-1.278,1.278a.557.557,0,0,0,.788.788L13.1,10.18a.557.557,0,0,0,0-.788Z\" transform=\"translate(658.929 839.659)\" fill=\"#fff\"><\/path><\/g><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Konzultace ZDARMA<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>V modern\u00edch organizac\u00edch je spr\u00e1va identit a p\u0159\u00edstup\u016f (Identity Management, IdM) kl\u00ed\u010dovou sou\u010d\u00e1st\u00ed zabezpe\u010den\u00ed informa\u010dn\u00edch syst\u00e9m\u016f. Vedle b\u011b\u017en\u00fdch u\u017eivatelsk\u00fdch \u00fa\u010dt\u016f existuj\u00ed i privilegovan\u00e9 \u00fa\u010dty, kter\u00e9 maj\u00ed v\u00fdrazn\u011b vy\u0161\u0161\u00ed pr\u00e1va a jejich\u017e kompromitace m\u016f\u017ee m\u00edt katastrof\u00e1ln\u00ed d\u016fsledky. Z tohoto d\u016fvodu se st\u00e1le v\u00edce prosazuje spr\u00e1va privilegovan\u00fdch \u00fa\u010dt\u016f (Privileged Account Management, PAM). Jak spolu tyto dva koncepty [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":9246,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_theme","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[32,34],"tags":[],"class_list":["post-9219","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-manager","category-konektory"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9219","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=9219"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9219\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/9246"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=9219"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=9219"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=9219"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}