VIDEO:
CMMC compliance: Least privilege made simple with AutoElevate
ENC Director of Technology Thomas Kinsinger explains how AutoElevate, a simple and cost-effective privilege management tool can help you achieve compliance with CMMC controls 3.1.5, 3.1.6, and 3.1.7, as well as requirements for configuration management in CMMC control family 3.4. Kinsinger is a Registered Practitioner with The Cyber AB, which validates his expertise as a CMMC consultant.
Visit our AutoElevate page to learn more, or contact us today to get help with your compliance requirements.
Transcript
Hi, I’m Thomas Kinsinger, director of technology at E-N Computers.
Today we are talking to those who are working to achieve CMMC compliance. What we are looking at
today is a product that will help achieve some of the requirements in the following control families:
- Access control 3.1
- Configuration management 3.4
This will help achieve compliance with controls in CMMC level 2 and level 3.
The product that I want to introduce you to is called AutoElevate. This is a privilege management tool. Using this tool, you can easily remove privileged access from users and devices.
If somebody has a local administrator account that allows them to make system changes or install a software, you can remove that access with the click of a button.
Privilege management is going to address CMMC Controls 3.1.5, 3.1.6, and 3.1.7.
You will need to create some policies and procedures around the use and management of the accounts, but this tool is designed to assist with the management, monitoring and auditing of privileged access.
The second control family that this tool will help us with is configuration management, specifically controls 3.4.7, 3.4.8, and 3.4.9.
At CMMC level 2 you need to be able to control and monitor user installed software. This tool will let you easily accomplish that by logging details about the execution and authorization of software installation.
At CMMC level 3 you will need to incorporate the use of whitelisting or blacklisting of software and restrict the use of non-essential programs. You will need to create some policies and procedures around what software is allowed.
Once that information is added to the AutoElevate system users can easily deploy software that is allowed throughout your network.
What AutoElevate gives you is simplified privilege management for next generation IT department. I hope this has been helpful.
If you’d like more information, go to our website, encomputers.com, and click on the Learning Center. There you’ll find some more articles and videos about CMMC compliance.
Take the IT Maturity Assessment
Is your business ready to weather changes, including employee turnover? Find out by taking our IT maturity assessment.
You’ll get personalized action items that you can use to make improvements right away. Plus, you’ll have the opportunity to book a FREE IT strategy session to get even more insights into your IT needs.
