Password Vault 3.9.5 8.2.1 11.5.3 Encryption Privileged Account 3.9.6 4.16.1 164.312(c)(1) 8.3.3, 11.2.4 Inventory Inactive Account 3.9.8 8.1.4 8.3.3 Maintenance Privileged User ID 4.15.1, 4.14.2, 3.12.2 8.1.2 164.312(b) 11.5.2 Activity Logging 4.14.4 7.0 Approval and Ownership Owner Title Date Signature Policy Contact Title MM/DD/YYY Approved By Title Date Signature Executive Sponsor Title MM/DD/YYYY 8.0 Revision History Revision Review Reviewer/Approver Version Description Date Date Name 1.0 Initial Version 10/25/15 9.0 Appendix – Secret Server Policy Enforcement This Appendix is optional and should be deleted before you distribute this security policy to your organization. This Appendix is a table listing the Policy statements in this document that are enforceable using Secret Server solution. Having a written Privileged Password Thycotic’s Policy using this template is a great first step, but now you need to enforce this policy—making sure passwords are vaulted, encrypted, changed, and monitored, all according to this policy. Thycotic Secret Server automatically discovers, vaults, and manages privileged passwords, ensuring your compliance with your written policy guidelines. Details on this enforcement are in the table below.
3.9.5 Password Vault Encryption 8.2.1 11.5.3 3.9.6 Privileged Account Inventory 4.16.1 164.312(c)(1) 8.3.3, 11.2.4 3.9.8 Inactive Account Maintenance 8.1.4 8.3.3 3.12.2 Privileged User ID Activity Logging 8.1.2 4.15.1, 4.14.2, 4.14.4 164.312(b) 11.5.2 7.0 Approval and Ownership Owner Title Date Signature Policy Contact Title MM/DD/YYY Approved By Title Date Signature Executive Sponsor Title MM/DD/YYYY 8.0 Revision History Version Description Revision Date Review Date Reviewer/Approver Name 1.0 Initial Version 10/25/15 9.0 Appendix – Secret Server Policy Enforcement This Appendix is optional and should be deleted before you distribute this security policy to your organization. This Appendix is a table listing the Policy statements in this document that are enforceable using Thycotic’s Secret Server solution. Having a written Privileged Password Policy using this template is a great first step, but now you need to enforce this policy—making sure passwords are vaulted, encrypted, changed, and monitored, all according to this policy. Thycotic Secret Server automatically discovers, vaults, and manages privileged passwords, ensuring your compliance with your written policy guidelines. Details on this enforcement are in the table below.
Privileged-Account-Management-Policy.docx