--- title: "CISOs: “Privileged access is the beast we still haven’t tamed”" description: There was almost universal consternation when it came to the subject of privileged access. The panel all recognised that the target of every malicious outsider is to become a privileged insider and that without those privileged accounts being used by so many people it would be possible to greatly reduce their risk from attacks. image: https://blog.wallix.com/hubfs/The_IT_Security_Analyst_and_CISO_Forum.png --- [![Wallix](https://blog.wallix.com/hs-fs/hubfs/LOGO_WALLIX_2024_black+orange-3.png?width=3108&height=827&name=LOGO_WALLIX_2024_black+orange-3.png "Wallix")](http://www.wallix.com/) [![New Call-to-action](https://no-cache.hubspot.com/cta/default/514643/6f69a618-d11c-44ef-ad26-88703b7dcab4.png)](https://cta-redirect.hubspot.com/cta/redirect/514643/6f69a618-d11c-44ef-ad26-88703b7dcab4) # CISOs: “Privileged access is the beast we still haven’t tamed” [› › › BACK TO THE BLOG](https://blog.wallix.com) \[fa icon="calendar"\] Jun 11, 2015 11:24:00 AM / by [WALLIX](https://blog.wallix.com/author/wallix) ![](https://blog.wallix.com/hs-fs/hubfs/blog-files/WALLIX.png?width=35&name=WALLIX.png) - [Tweet](https://twitter.com/share) This week I was fortunate enough to be able to attend the IT Security Guru’s annual Analyst and CISO Forum here in London. A gathering of the great and the good from the analyst community and some cutting edge vendors were part of what proved to be a fascinating roundtable with 10 of the UKs top CISOs. ![The_IT_Security_Analyst_and_CISO_Forum](https://blog.wallix.com/hubfs/The_IT_Security_Analyst_and_CISO_Forum.png) There was almost universal consternation when it came to the subject of privileged access. The panel all recognised that the target of every malicious outsider is to become a privileged insider and that without those privileged accounts being used by so many people it would be possible to greatly reduce their risk from attacks. In fact one CISO had tasked a “Red Team” with testing external and internal defences and had discovered that, “Very often the most basic effort to secure privileged accounts would be enough to stop them”. But that proves difficult in the real world, where, as one CISO said, “Every user is a privileged user”. Access by database administrators and developers is also an area of real concern as these roles very often have rights to some of the most precious and sensitive data that businesses have. Another CISO described a situation where developers were, “Routinely duplicating production databases to work with”. Better management and control of privileged users will only come from having centralised management and visibility of how access is being used. And this will also make it much easier to audit that activity in the event of a problem. It’s clear then that privileged access is very much at the centre of the radars of those responsible for ensuring information security and they’re seeking better ways to enable their end-users, while staying compliant.   [![Get Access to our White paper : Privileged Access Management Solution](https://no-cache.hubspot.com/cta/default/514643/1213ebed-c7f4-41ff-b8dc-800bcef9e224.png)](https://cta-redirect.hubspot.com/cta/redirect/514643/1213ebed-c7f4-41ff-b8dc-800bcef9e224) Topics: [Mitigating External Attacks](https://blog.wallix.com/topic/mitigating-external-attacks) ![WALLIX](https://blog.wallix.com/hs-fs/hubfs/blog-files/WALLIX.png?width=100&height=100&name=WALLIX.png) #### Written by [WALLIX](https://blog.wallix.com/author/wallix) ### SIGN UP to receive our best articles! ## [![Get Access to our white paper : The Insider Threats Comic Book](https://no-cache.hubspot.com/cta/default/514643/21e4442a-b1c5-4e98-a7c1-54de89072624.png)](https://cta-redirect.hubspot.com/cta/redirect/514643/21e4442a-b1c5-4e98-a7c1-54de89072624) - Recent - Popular - Categories ### Lists by Topic - [Preventing Insider Threat (91)](https://blog.wallix.com/topic/preventing-insider-threat) - [Mitigating External Attacks (81)](https://blog.wallix.com/topic/mitigating-external-attacks) - [Reaching IT Compliance (58)](https://blog.wallix.com/topic/reaching-it-compliance) - [Controlling Third Party Access (33)](https://blog.wallix.com/topic/controlling-third-party-access) - [WALLIX Products (29)](https://blog.wallix.com/topic/wallix-products) - [Optimizing Cyber-Insurance (15)](https://blog.wallix.com/topic/optimizing-cyber-insurance) - [Improving Cybersecurity (8)](https://blog.wallix.com/topic/improving-cybersecurity) - [Cloud Security (4)](https://blog.wallix.com/topic/cloud-security) - [Events (2)](https://blog.wallix.com/topic/events) [![Get Access to our White paper : Major misconceptions about IT security](https://no-cache.hubspot.com/cta/default/514643/ce3632c6-744e-4bca-919e-6795f7c73b63.png)](https://cta-redirect.hubspot.com/cta/redirect/514643/ce3632c6-744e-4bca-919e-6795f7c73b63) ### Posts by Topic - [Preventing Insider Threat (91)](https://blog.wallix.com/topic/preventing-insider-threat) - [Mitigating External Attacks (81)](https://blog.wallix.com/topic/mitigating-external-attacks) - [Reaching IT Compliance (58)](https://blog.wallix.com/topic/reaching-it-compliance) - [Controlling Third Party Access (33)](https://blog.wallix.com/topic/controlling-third-party-access) - [WALLIX Products (29)](https://blog.wallix.com/topic/wallix-products) - [Optimizing Cyber-Insurance (15)](https://blog.wallix.com/topic/optimizing-cyber-insurance) - [Improving Cybersecurity (8)](https://blog.wallix.com/topic/improving-cybersecurity) - [Cloud Security (4)](https://blog.wallix.com/topic/cloud-security) - [Events (2)](https://blog.wallix.com/topic/events) see all #### About Us WALLIX is a software company offering privileged access management solutions to help enterprises, public organizations and cloud service providers protect their critical IT assets including data, servers, terminals and connected devices. #### More Links - [Homepage](http://www.wallix.com/) - [Blog](https://blog.wallix.com/) - [Wallix](http://www.wallix.com/company/) #### Contact us \[fa icon="phone"\] [Get the right number](http://www.wallix.com/contact/) \[fa icon="envelope"\] [sales@wallix.com](mailto:sales@wallix.com) \[fa icon="home"\] [Find the right location](http://www.wallix.com/contact/) #### Follow Us Copyright® 2026 | Wallix - Trace, Audit & Trust \[fa icon="chevron-up"\] ![](https://googleads.g.doubleclick.net/pagead/viewthroughconversion/880438901/?value=0&guid=ON&script=0)