If I was to perform an IT audit of an organization and I find that all privileged users accounts such as, administrative accounts of the various systems are all stored in a central location with adequate security, and access to such accounts’ details is restricted to only authorized staff based on their role within the IT team, then I would surely expect to find an identity management product behind all this good practice! Whichever product you may use and I do recommend such products in corporate environments it is important to trust the management of the product to an individual outside of the IT department such as, an internal audit or security officer.
There are various products to choose from but I would suggest looking at NetWrix’s Privileged Account Manager (PAM) full product which is now available for free for unlimited users!!!
Read more here – http://blog.netwrix.com/2012/04/26/full-featured-netwrix-privileged-account-manager-is-now-100-free-of-charge/
