{"id":"FR2001619708","name":"Idira Endpoint Privilege Manager for Government","provider":"Palo Alto Networks, Inc.","providerSlug":"palo-alto-networks-inc","status":"FedRAMP Authorized","impact":"High","authType":"Agency","authDate":"2024-03-14","serviceModel":["SaaS"],"deployment":"Public Cloud","businessFunctions":["Cybersecurity & Risk Management"],"assessor":"Schellman Compliance, LLC","assessorId":"136571","smallBusiness":false,"website":"https://www.cyberark.com/products/endpoint-privilege-manager/","description":"With Idira™ Endpoint Privilege Manager by Palo Alto Networks, government organizations can confidently defend against attacks by automatically removing local admin rights, enforcing least privilege, enabling policy-based comprehensive conditional application control, maintaining application catalog, and protecting the entire endpoint security stack from tampering – in line with a number of recent CISA alerts, advisories and recommendations, and starting day one.\r\n\r\nThe Idira Endpoint Privilege Manager secure and flexible SaaS management console allows for centralized policy-based and role-based management to ensure automated, robust and differentiated application of policies based on the user’s role. Automatic elevation of known good programs requiring elevation, including those legacy and not-UAC-aware, significantly cuts down on the IT Service Desk requests, while optional automatic access restriction (for example, network connectivity restriction) for unknown applications significantly reduces the area of attack and helps break ransomware kill chain.\r\n\r\nOut-of-the-box anti-ransomware policy allows to add additional layer of security around sensitive data and prevent data corruption even in the event of successful asset compromise and ransomware execution.\r\n\r\nAdditional critical capabilities include blocking credentials, private keys, secrets, passwords, hashes, cookies and other sensitive information from memory, browsers, operating system and credential stores, effectively blocking most attacks based on credential compromise.\r\n\r\nIdira Endpoint Privilege Manager helps with audit and compliance by addressing specific regulation requirements and creating audit trail for identity and privilege events on the endpoints.\r\n\r\nThe following customer side components are authorized as part of the Idira Endpoint Privilege Manager for Government offering: Idira Endpoint Privilege Manager Windows Agent, Idira Endpoint Privilege Manager macOS Agent, Idira Endpoint Privilege Manager Linux Agent.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/Idira%20Logo.png","inMarketplace":true,"agencies":["22-034","22-061-01","22-014","22-020"],"reuseCount":3,"leverages":["AGENCYAMAZONEW","F1603047866","FR2001619337"],"leveragedBy":["FR2001619337"],"timeline":[{"date":"2022-03-30","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2023-03-23","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2024-03-14","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Schellman Compliance, LLC"},"sponsor":"22-034","trustCenterCheck":null}