How a Healthcare Organization used SPHEREboard to Improve their Environment

The overarching objective was the implementation of a comprehensive risk reduction solution in accordance with industry best practices. This objective was successfully realized with the expeditious deployment of SPHEREboard SecureAD allowing for quick improvement of access controls, prioritizing Least Privileged Access, resulting in a dramatic reduction of the attack surface across Active Directory.

DOWNLOAD

Insights Summary

SPHEREboard’s Intelligent Discovery included reporting that provided the following insights:

  • Excessive number of mail-enabled security groups, outnumbering standard security groups. This is against industry best practices due to the dual nature of mail-enabled security groups.
  • Empty groups contain zero members, either subgroups or accounts. These groups are often unnecessary, and the cleanup of these groups typically represents a very low risk.
  • Stale groups that are no longer necessary should be removed to reduce the attack surface and
    reduce management overhead and token bloat.
SecureAD