IT user rights management

In the context of the ECSM, organised by BSI (Federal Office for Information Security) and ENISA (European Union Agency for Cybersecurity), we deal with the topic of endpoint security. With our topic "Ying and Yang - Home office and endpoint security in harmony", we want to shed light on the responsibilities of the two sides - the employing company and the employees.

IT user rights management

IT user rights management

Imagine a bank manager who manages all the keys for the bank himself. These many keys give him access to all rooms -> vault, safe deposit boxes, server/file room and all entrances and exits. Who would be kidnapped if the bank were robbed? Exactly, the bank manager. This would give the burglars free access to all areas. It would make more sense to divide up the bunch of keys. The person responsible for each area would only get the key for the respective area of responsibility. In the event of a bank robbery, the thieves would first have to get their hands on all the keys in order to gain access to each area.

The situation is similar in IT systems. The more authorisations, the more responsibility, the more damage can be done.