Encryption model & independent audits — found from sitemap — BeyondTrust Password Safe

Cited by

Facts read from this source

• Data centers Report an error

  “The BeyondTrust Secure Remote Access Cloud infrastructure is spread across six Tier 3 or higher data centers. SRA customers can designate a regional data center to host their SRA solution”

• ISO 27001 Report an error

  “Data centers hosting Secure Remote Access Cloud have achieved ISO/IEC 27001 certification of their information security management systems.”

• Audits Report an error

  “Additionally, all data centers have completed the following examinations: SOC II Type 1 SSAE 16 SOC 1 Type II SOC 2 Type II”

• Data privacy framework Report an error

  “They are also Data Privacy Framework-compliant to meet European Data Privacy compliance regulations.”

• Customer data isolation Report an error

  “All customer data is confined to a dedicated instance of Secure Remote Access allocated to your organization. The data physically and logically resides in a siloed SRA instance and is not shared between customers.”

• Authentication sources Report an error

  “Secure Remote Access can be provisioned for locally defined user SRA accounts or can be integrated into existing authentication sources. For instance, a commonly integrated authentication source is Microsoft Active Directory.”

• Auth protocols Report an error

  “Additional security providers are available that allow for user authentication using Kerberos or SAML (for single sign-on) or using RADIUS (for multi-factor authentication).”

• Ldap group mapping Report an error

  “Each of these providers can be configured to use LDAP groups to set the permissions for the user, allowing you to map existing LDAP groups to teams in Secure Remote Access.”

• Credential manager Report an error

  “BeyondTrust Secure Remote Access can be integrated with an Endpoint Credential Manager (ECM) to improve password security for privileged users and vendors. An ECM functions as the middleware for communication, and the ECM can be used to integrate SRA with password vaults.”

• Credential injection Report an error

  “Credential injection is a built-in feature of SRA. It allows administrators and privileged users to seamlessly inject credentials into systems without exposing plain text passwords. This feature can also be used with third-party vault tools.”

• Ssl enforcement Report an error

  “BeyondTrust Secure Remote Access can be configured such that it enforces the use of SSL for every connection made to the site. SRA requires that the SSL certificate being used to encrypt the transport is valid.”

• Tls versions Report an error

  “Configuration options also are available to disable the use of TLSv1 and/or TLSv1.1. SRA always has TLSv1.2 enabled to ensure proper operation of the software.”

• Session logging Report an error

  “All the events of an individual session are logged as a text-based log. This log includes users involved, session tools used, chat transcripts, system information, and any other actions taken by the SRA user. This data is available on the B Series Appliance in an uneditable format for up to 90 days”

• Video recording Report an error

  “SRA also allows enabling video session recordings. This records the visible user interface of the endpoint screen for the entire screen sharing session.”

• Recording retention Report an error

  “The period of time these recordings remain available depends on the amount of session activity and the available storage, up to 90 days maximum.”

• Export integration client Report an error

  “The integration client is a Windows application that uses the API to export session logs, recordings, and backups from the SRA Cloud site according to a defined periodic schedule.”

• Export plugins Report an error

  “SRA provides two integration client plug-in modules. One handles export of reports and video recordings to a file system destination. The second exports select report information (a subset of the entire data collection) to a Microsoft SQL Server database.”

• Syslog events Report an error

  “All authentication events, such as when a user logs in to the console or accesses the /login interface, generate a syslog event which can be logged on a syslog server. Additionally, any configuration change that is made to the SRA Cloud instance also generates a syslog event”

• Vulnerability scanning Report an error

  “BeyondTrust incorporates vulnerability scanning in our software testing process. We track the results of vulnerability scans performed prior to a software release and prioritize resolution based on severity and criticality of any issues uncovered.”

• Third party testing Report an error

  “BeyondTrust contracts with third-parties for a source code level review as well as penetration testing.”

• API Report an error

  “An API is provided for use with automation tools and external applications.”

• Ldap Report an error

  “SRA can connect to external user directories, such as LDAP, for secure user management”

• Session capabilities Report an error

  “SRA mediates connections between users and remote systems, allowing file uploads and downloads, remote control of desktops, and access to system information and diagnostics, the command line, and the registry editor.”

• Session recording audit Report an error

  “You can define how users connect, monitor sessions in real time, and record every session for a detailed audit trail.”

• Os support Report an error

  “SRA compatible with multiple operating systems, including Windows, Mac, various Linux distributions, and mobile operating systems. Supported system types include laptops, desktops, servers, kiosks, point-of-sale systems, smartphones, and network devices.”

• Network monitoring Report an error

  “The infrastructure is continuously monitored, and vulnerability testing is conducted regularly by internal security staff.”

• Firewall ports Report an error

  “TCP Port 443 (required) Used for all session traffic.”

• Firewall optional ports Report an error

  “TCP Port 80 (optional) Used to host the portal page without the user having to type HTTPS. The traffic can be automatically redirected to port 443.”

• Csr generation Report an error

  “SRA can natively generate certificate signing requests.”

• Session id Report an error

  “All sessions are assigned a unique session ID referred to as an LSID. The session LSID is a 32-character string that is a unique GUID for each session.”

• Physical security Report an error

  “The measures include multiple levels of physical security, such as: Man traps / air lock Badged access Securely locked cages Biometric access Securely isolated storage area 24/7 security personnel on duty”

• Auto updates Report an error

  “SRA Cloud instances might be automatically updated based on the update interval chosen by the customer at the time of purchase.”

Scores citing this record

• The CISO Encryption model & independent audits
• The CISO Sharing, roles & recovery
• The CISO SSO, directory sync & provisioning
• The CISO Audit logs, policies & reporting
• The CISO Hosting choice, offline access & export
• The CISO European sovereignty
• The CISO Pricing transparency
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor Sharing, roles & recovery
• The Compliance Auditor SSO, directory sync & provisioning
• The Compliance Auditor Audit logs, policies & reporting
• The Compliance Auditor Hosting choice, offline access & export
• The Compliance Auditor European sovereignty
• The Compliance Auditor Pricing transparency
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Sharing, roles & recovery
• The DevOps Engineer SSO, directory sync & provisioning
• The DevOps Engineer Audit logs, policies & reporting
• The DevOps Engineer Hosting choice, offline access & export
• The DevOps Engineer European sovereignty
• The DevOps Engineer Pricing transparency
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer Sharing, roles & recovery
• The Identity Engineer SSO, directory sync & provisioning
• The Identity Engineer Audit logs, policies & reporting
• The Identity Engineer Hosting choice, offline access & export
• The Identity Engineer European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic Sharing, roles & recovery
• The Skeptic SSO, directory sync & provisioning
• The Skeptic Audit logs, policies & reporting
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The SME Owner Encryption model & independent audits
• The SME Owner SSO, directory sync & provisioning
• The SME Owner Audit logs, policies & reporting
• The SME Owner Hosting choice, offline access & export
• The SME Owner European sovereignty
• The SME Owner Pricing transparency