Continuous Operational Oversight

Securden provides ultimate visibility into how users are using their permissions and privileges. The various reports provided by Securden offer insights into what applications are being elevated by which users. You can make use of these insights to improve policies and demonstrate compliance with regulations.

Scheduling Periodic Reports

Set up scheduled tasks for automatically exporting reports every week/month. You have various reporting options to choose from. We recommend you review the "Applications vs. Number of Elevations in the last 30 days" report under Concise Reports without fail. The insights provided by this report help fine tune policies for least privilege.

Setting Up Alerts for Suspicious Activities

You can configure notifications whenever certain activities are detected. You must set up alerts for events that can have serious ramifications. For example, if a user tries to uninstall the Securden agent or a command is executed with SUDO privileges, alerts must be triggered. Navigate to Admin -> Notifications to set this up.

Pro Tip

You can choose who receives these alerts. You can designate specific users/auditors/administrators/managers to receive alerts based on the seriousness of the event.

Setting Up Centralized Privilege Management for Distributed Deployments

In very large enterprises, endpoints are often distributed across different locations. Securden supports distributed deployments through application servers. You can install the Securden server on the primary network and deploy application servers for all other locations. Ensure connectivity between the application server and the Securden server in the primary network, and you have centralized control over privileges on all endpoints in the organization.

Pro Tip

You can maintain central oversight and delegate responsibility to administrators/approvers in the secondary network by using designated approvers in the approval workflow