What is a Privileged Account?

Funny isnt it, how these two words is simply driving everyone so cautious in everything they do and the dire need to now discover and monitor ALL Privileged Accounts?

Well, it's time to do so actually and it's a commendable effort to trying to get it right or even the intiatiting process of it. Kudos to you!

Alright, these is where the misunderstandings/confusion start to rise. Let's break it down and we will see how we go. Feel free to comment your thoughts away, it's pretty much a HOT SPICY topic.

1st Word: Account

• Definition of Account in English: An arrangement that someone has with a company that allows them to use the Internet, send, and receive messages by e-mail, files, access applications/softwares, etc.
  

• 2nd Definition of Account in IT Terms: A digital identity (like a username/password) for accessing systems, services, or networks, representing a user, device, or application, and defining their permissions
  

• We can safely say, in an organization, every single individual will have an account created to perform their daily operational tasks.
  

---

2nd Word: Privileged

• Definition of Privileged in English: A special right or advantage possessed by an individual or group.
  

• 2nd Definition of Privileged in IT Terms: Having elevated rights, special permissions, or authority to perform high-level, security-sensitive tasks
  

• We can safely say, in an organization, an individual or a group will be classified as "Privileged User(s)" assigned with elevated permissions to perform sensitive tasks.

---

In layman terms: There are individuals, group of individuals, as well as non-human identities (Service Accounts/Service Principals/API tokens) are specifically chosen to be assigned & authorized with special permissions to perform high-level, security-sensitive tasks.

• When misused wrongly, tendency for a business disruption, data breach incident to occur is extremely high and will cause financial loss and reputation damage for the organization. That's how scary Privileged Accounts are.
  

---

Now that we have understood the meaning, so what's the hype about it than?

1. There have been scenarios that Privileged Accounts were shared and used by the unauthorized person and had access to files/data that MUST not have been accessed by the person.
   

2. Privileged Accounts are the targeted favourite accounts for hackers to gain control and access in order to infiltrate the organization in lateral movement and launch ransomeware attacks.
   

3. Even with the right personnel using the Privileged Accounts, they can carry out tasks that will lead to insider threats such as blackmailing and sabotaging the organization.
   

4. With Privileged Accounts, they are able to perform higly sensitive operations such as Encryption of Data, Delete data, Shut Down, Reboot system, and may have FULL access (write/edite/delete) to sensitive information & more.
   

5. They are able to use the Privileged Accounts with no supervision after office hours and there is no clear audit trail of what's being created/modified/configured if there's a need to or by any chance a system is not working in the intended manner. Which can lead to additional time and effort required for an investigation to be conducted.
   

6. Service Accounts/Service Principals can be considered Privileged Accounts based on the privileged permissions assisgned AND if they are performing any highly sensitive operations.

   1. Read about: Process - Service Accounts Ownership

Since now you have an understanding of the hype, so it's pretty obvious, Privileged Accounts MUST be protected & monitored at all time.

Soon enough, a wave of IGA, IAM, and PAM vendors begin enteing into the market offering their capabilities where they are competing with each other on how exceptionally well they can protect and safeguard Privileged Accounts.

And just like that, the world started whirling around them, like it was auditioning for a musical, bringing them into the organization to sprinkle in some top-tier security magic! Voilaaaa!