Secure Shell keys are routinely untracked, unmanaged and poorly secured in financial service organizations even though they provide the highest levels of administrative access in those organizations, according to new research.

Salt Lake City-based Venafi recently conducted a study that evaluated how finservs manage and implement SSH, which are network protocols for securing remote connections between computers, as well as providing strong authentication. One hundred IT security professionals from the financial services industry participated in the study, which revealed a widespread lack of SSH security controls.

For example, 69% of respondents from the financial services industry admit they do not actively rotate keys, even when an administrator leaves their organization. This allows former employees to have ongoing privileged access to critical and sensitive systems.

Complete your profile to continue reading and get FREE access to CUTimes.com, part of your ALM digital membership.

  • Critical CUTimes.com information including comprehensive product and service provider listings via the Marketplace Directory, CU Careers, resources from industry leaders, webcasts, and breaking news, analysis and more with our informative Newsletters.
  • Exclusive discounts on ALM and CU Times events.
  • Access to other award-winning ALM websites including Law.com and GlobeSt.com.
NOT FOR REPRINT

© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.