As competition among Telcos and other managed service providers intensifies, many are looking to transform their IT and network infrastructure in order to achieve the agility and cost base now required to succeed. But mastering the new economics of the cloud, while updating the necessary OSS/BSS infrastructure that underpins it, presents some unique challenges in terms of data security.
Due to the nature of managed services, a single security breach can impact hundreds of organiations at once, jeopardising their operations, profitability and reputation at a single stroke. This makes the sector an extremely attractive target for cyber-attacks.
Facts & Figures
“90% of IT security professionals are concerned by cloud computing security”
2015 Cloud security report by Bitglass
Cloud computing : business at risk ?
90% of businesses reported security as a key concern in their decision as to whether to adopt cloud services. One of the biggest risks to the security of managed services – especially hosting services – comes from the inevitable sharing of system-administration tasks between the customer and the service provider. Very often, there is no distinction between the privileged user accounts (e.g. root, admin, administrator, etc.) for these two groups, which makes it virtually impossible to establish, at any given point in time, who is connected to what, and what actions they are performing.
This raises the risk of malicious, as well as accidental, misuse of your systems and infrastructure, and the potential disruption to business that can result. No matter how well your own staff may be trained and educated in security best practice, you can never guarantee the same of your customers. Conversely, your customers may have the same reservations about your staff.
“For over eight months, more than one third of our machines have been connected to the WAB. The integration went really well. Whether internally or from our clients, we never had any negative feedback about the solution. The WAB acts as a central authentication point that allows us to manage all rights and to secure all access.”
Nicolas Vanpoperinghe, System, network and security administrator at Coreye Pictime
Facing the regulatory compliance challenge in Telcos & managed services providers
In addition to the responsibility to customers and shareholders to secure sensitive data, Telcos and managed services providers, as well as their customers face a range of government regulations, for which non-compliance can carry significant penalties. These include Payment Card Industry Data Security Standard (PCI DSS), as well as various international regulations concerning end-user privacy and data protection.
Privileged access management (PAM) as a new Business Opportunity
As highlighted, many customers are already aware of the added risk that accompanies outsourced services and this can make them extremely receptive to the idea of purchasing additional security on demand. With a true multi-tenancy PAM solution, service providers can offer comprehensive control, monitoring and reporting for access to all servers and other devices right across each of their customers’ networks.
Why public Telcos and managed services providers should focus on Privileged User Management ?
Privileged Access Management (PAM) refers to a range of technologies designed to mitigate the inherent risks associated with the privileged user accounts of administrators and super-users. By offering full control and visibility of the sensitive, daily administration tasks of both service providers and customers, an effective PAM solution can greatly reduce the risk of attack, while helping to ensure compliance with the necessary regulations.
Meeting Telcos & managed services providers requirements with Wallix privileged user management solution
At WALLIX, we believe that the value of any software solution lies as much in its ease of roll-out, adoption and usage, as with its features and benefits. WALLIX AdminBastion (WAB) Suite has therefore been designed not only to cover all risks relating to the privileged access of service providers and their customers, but to do so in the simplest, most intuitive way, ensuring that business challenges are addressed in the shortest possible time and with minimal disruption to existing workflows.
And with true multi-tenancy, WAB Suite can also be offered as a managed service, opening up lucrative new opportunities, improving customer satisfaction and increasing your revenue per customer.