PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk

Summary: A vendor article on The Hacker News describes privilege elevation and delegation management (PEDM) as just-in-time elevation for a specific action, for a limited time, under rules the security team sets, replacing standing local admin rights on endpoints. It cites Gartner's guidance to remove persistent local admin rights and elevate specific processes, applications and commands, and notes that PEDM policy produces one of three outcomes when a user initiates an action.
What you should know: Standing admin rights that outlive their purpose let an attacker on a compromised endpoint disable controls, establish persistence, or move toward more valuable systems. The article's own warning is that a policy requiring IT to approve every legitimate installer or update has simply replaced standing privileges with a new bottleneck.

Read the original at The Hacker News ↗