New EMA White Paper Highlights Cyber-Ark's Distinctive Approach to Greater Security and Efficiencies Around Privileged Identity Management

Business Wire, August 21, 2008

NEWTON, Mass. -- Cyber-Ark[R] Software, the leading provider of Privileged Identity Management (PIM) , Sensitive Information Management and Digital Vault solutions, today announced the availability of a white paper written by Enterprise Management Associates (EMA) and sponsored by Cyber-Ark entitled, "Turning the Spotlight on IT's Dirty Little Secret: Securing the Common Point of Failure in IT Risk Controls."

The informative paper examines the poor state of high-privilege access management that represents a common point of failure in IT governance, risk and compliance. Specifically, EMA describes how high-privilege super-user and administrative accounts that directly control IT resources and applications have largely been overlooked by enterprises seeking to mature their identity and access management strategy.

"Most enterprises have been so concerned about the threat on the outside that they may have turned a blind eye to this soft underbelly, where the poor state of control over the most sensitive and critical functionality is one of IT's most pernicious dirty little secrets," wrote the white paper's author, Scott Crawford, research director at EMA. "This has created an environment where the potential for financially devastating and headline creating events is greatly increased, both from the risks posed by an insider gone bad, as well as from the inadvertent misuse by a well-intentioned administrator causing wide ranging unintended consequences."

Recognizing the threat that poor controls over privileged access pose, the white paper describes Cyber-Ark's privileged access management solution, Enterprise Password Vault[R] (EPV), as "distinctive" in its approach to managing an organization's privileged and most sensitive information. Additional Enterprise Password Vault features called out in the paper include:

* Better security for privileged access and user accounts, including the security of the Cyber-Ark platform itself;

* Effective linkage of high-privilege access and actions with specific individuals or applications;

* Automation and auditing of the privileged access management lifecycle, including provisioning and de-provisioning of access for specific users, as well as measures specific to high-privilege access such as dual-control and emergency response procedures;

* Integration of privileged account management with IT management processes such as the service desk, help desk or ticketing system, in line with industry best practices that have a decided and positive impact on IT governance priorities and effective risk and compliance management.

A complimentary copy of " Turning the Spotlight on IT's Dirty Little Secret: Securing the Common Point of Failure in IT Risk Controls " may be obtained by visiting www.cyber-ark.com.

About Cyber-Ark

Cyber-Ark[R] Software is the leading provider of Privileged Identity Management (PIM) solutions for securing privileged user accounts and highly-sensitive information across the enterprise. Long recognized as an industry innovator for its patented Vaulting Technology[R], Cyber-Ark's digital vault products include: The Enterprise Password Vault[R] for the secure management of administrative, application and privileged user passwords; the Inter-Business Vault[R], a secure managed file transfer solution, and the Sensitive Document Vault[TM] for securing and managing highly-sensitive documents. Cyber-Ark's Vaulting platform has been tested by ICSA Labs, an independent division of Cybertrust and the security industry's central authority for research, intelligence, and certification testing of security products. Cyber-Ark's award-winning technology is deployed by more than 400 global customers, including 100 of the world's largest banks and financial institutions. Headquartered in Newton, MA, Cyber-Ark has offices and authorized partners in North America, Europe and Asia Pacific. For more information, visit www.cyber-ark.com