Name: Delinea
Brand: Delinea
SKU: 63dbee75f05668cf40ada31a
Rating: 4.4 (38 reviews)

Question 1

Implementation Process

Accepted Answer

Assessment and Project Planning: Goals and Timelines: Confirm the goals of the Privileged Access Management (PAM) project and discuss timelines to achieve them. Optionally, assess the current state of PAM adoption using Delinea’s PAM Maturity Model as a framework. Project Plan: A project manager from Delinea services teams up with a project manager from the client side to create a joint project plan, including phases and key milestones. Preparation for Installation and Configuration: Environment Understanding: Get to know the environment where Delinea’s software will be implemented. This includes reviewing security policies, procedures, and processes for disaster recovery and high availability. Hardware and Software Requirements: For on-premise installations, understand the best hardware and software requirements for the environment. For SaaS models, provisioning and hardware decisions are handled by Delinea. Architecture Development: Design and Agreement: Develop and agree upon a customer-specific reference architecture for the installation of Delinea solutions, including Secret Server, Distributed Engines, Privilege Manager, and supporting software such as SQL Server, IIS, HSM, and SIEM integration. Preparation for Implementation: Stakeholder Identification: Identify and meet with critical stakeholders responsible for the implementation and ongoing management of the PAM solution. Prioritize “quick wins” to demonstrate early success and gain buy-in from executives and different departments. Installation: QA Environment: Install and test the PAM solution in a QA environment, where possible, before moving to production. Deployment: With the plan in place and an agreed-upon design/architecture, the team installs the PAM solution, starting with accounts and processes with fewer dependencies first. Implementation: Long-term Success: Ensure the team is set up for long-term success by implementing capabilities ranging from PAM fundamentals to comprehensive, mature privilege management based on the goals set forth in the assessment and planning phase. Supporting Behavior Change: Adoption Support: Provide extra support for the human aspect of PAM adoption, ensuring that technical experts and users are comfortable with the new system. Duration of Implementation The duration of the implementation process for Delinea software typically takes weeks rather than months. This rapid deployment is a significant advantage, allowing organizations to integrate Delinea’s solutions quickly and efficiently. Customization

Question 2

Customisation

Accepted Answer

Identity Discovery: The platform enables the discovery of all identities within an organization, ensuring that no user or device is overlooked. Access Level Assignment: It allows for the assignment of appropriate access levels to different users, ensuring that each user has the necessary permissions without over-privileging. Real-Time Threat Detection and Response: Delinea can detect irregularities and respond to identity threats in real-time, providing a dynamic and responsive security environment. Agent-Based and Agentless Approaches: The platform supports both agent-based and agentless approaches to Privileged Access Management (PAM), offering flexibility in how endpoints are protected. Integration with SSO and SaaS: Delinea integrates seamlessly with Single Sign-On (SSO) and is available as a Software as a Service (SaaS), making it adaptable to various IT environments.

Question 3

Additional Costs

Accepted Answer

Setup Fees: These may include costs associated with the initial deployment and configuration of the software. Given Delinea's emphasis on rapid deployment, these fees are likely designed to be competitive and reflect the streamlined implementation process. Maintenance Fees: Ongoing maintenance fees typically cover software updates, patches, and general upkeep to ensure the system remains secure and functional. These fees are usually part of an annual or monthly subscription model. Support Charges: Support charges can vary based on the level of support required. Delinea likely offers different tiers of support, ranging from basic support to premium support with faster response times and more comprehensive assistance.

Question 4

Training

Accepted Answer

Training Programs: Onboarding Training: Delinea provides onboarding training to help new users get started with the software. This training typically covers the basics of the platform, including how to navigate the interface, configure settings, and use key features. Advanced Training: For users who need more in-depth knowledge, Delinea likely offers advanced training sessions that delve into more complex functionalities and best practices for managing privileged access. Support Services: Technical Support: Delinea offers technical support to assist users with any issues they encounter. This support can include troubleshooting, resolving technical problems, and providing guidance on using the software effectively. Documentation and Resources: Users have access to a wealth of documentation, including user manuals, FAQs, and knowledge base articles that provide detailed information on various aspects of the software. Customer Success Teams: Delinea's customer success teams work closely with clients to ensure they achieve their security goals and maximize the value of the software. This includes regular check-ins, performance reviews, and strategic advice. Additional Support Options: Webinars and Workshops: Delinea may offer webinars and workshops to provide ongoing education and updates on new features, best practices, and industry trends. Community Forums: Users can participate in community forums to share experiences, ask questions, and learn from other users.

Question 5

Security Measures

Accepted Answer

Encryption: Data in Transit and at Rest: Delinea uses AES-256 standard encryption for data both in transit and at rest. This includes the use of PBKDF2-HMAC-SHA256 hashing algorithm for additional security. Private Encryption Keys: Each customer has private encryption keys, with support for third-party key management (e.g., AWS KMS). Secrets are salted before being hashed and encrypted with unique Initialization Vectors and Keys. Intrusion Detection and Prevention: DDoS Attack Prevention: Measures are in place to prevent Distributed Denial-of-Service (DDoS) attacks. Penetration Testing: Regular penetration testing is conducted to identify and mitigate vulnerabilities. Behavioral Analytics and Anomaly Detection: Privileged Behavior Analytics (PBA): This tool analyzes activity on privileged accounts in real-time to detect anomalies and provide threat scoring and configurable alerts. Security Operations Center (SOC): Proactive Monitoring: Continuous monitoring protocols are applied to detect and respond to any indications of unauthorized access attempts. Compliance with Industry Standards: Certifications: Delinea is ISO27001 and SOC2 certified, and its software is Common Criteria certified, FIPS 140-2 and NIST-compliant, and FedRAMP authorized. It also complies with GDPR and the EU/US Privacy Shield. Access Control and Tenant Isolation: Strict Access Control: Delinea enforces strict access controls, ensuring that each operational component only has the rights required to perform its role. Tenant Isolation: Data is isolated by tenant, ensuring that even if unauthorized access occurs, it is limited to the compromised component. Transport Layer Security (TLS): Secure Connections: All connections to Delinea cloud services are protected via TLS, ensuring secure communication channels.

Question 6

Updates

Accepted Answer

Regular Updates: Frequency: Delinea supports the use of software versions up to a year prior to the current version, indicating a regular update cycle. Notification: By default, Secret Server is configured to notify administrators immediately when software updates are available. This can be customized to allow automatic checks for updates. Update Management: Automatic Checks: The software checks for available updates once per day and sends relevant information to Delinea's update server. This includes details like .NET Framework version, IP address, SQL Server version, and product version. Manual Updates: If the server has no outbound access, updates can be received through Delinea’s Support Portal. Administrators can sign up for notifications and download updates manually. Telemetry: Delinea collects anonymized usage data to guide future research and development, ensuring that product improvements provide the greatest benefit to customers. Patch Management: Critical Vulnerabilities: Delinea has a process in place for quickly addressing critical vulnerabilities. For example, they recently patched a critical authentication bypass vulnerability in the Secret Server SOAP API.

Question 7

Data Ownership and Portability

Accepted Answer

Data Ownership: Customer Data: Delinea's Privacy Policy explicitly states that customers retain ownership of their data. Delinea does not claim ownership of the personal data processed on behalf of its customers. Data Processing: Delinea acts as a data processor for the personal data submitted by customers while using their software and services. This means Delinea processes data on behalf of the customer, who is the data controller. Data Portability: Right to Portability: Under GDPR, customers have the right to request that Delinea provides them with all the personal data they hold, in order to transfer it to another provider. This right ensures that customers can easily move their data if they choose to switch services. Data Retrieval: Upon expiration or termination of a SaaS subscription, customers have a 30-day grace period to retrieve their data. During this period, they can request assistance from Delinea's technical support to facilitate the data retrieval process. Data Processing Agreements: Sub-Processors: Delinea maintains a list of sub-processors and ensures that any sub-processors engaged to process personal data on their behalf adhere to terms that are no less protective than those imposed on Delinea itself. Customers are notified of any new or replacement sub-processors and have the right to object to them on legal grounds. Compliance with GDPR: Data Protection Officer: Delinea designates a Data Protection Officer (DPO) to oversee compliance with data protection laws, including GDPR. The DPO ensures that data processing activities are conducted in accordance with legal requirements and best practices.

Question 8

Scaling Up / Down

Accepted Answer

Scalability of Solutions: Cloud and On-Premise Deployment: Delinea offers both cloud and on-premise deployment options, providing flexibility to scale based on the organization's infrastructure and needs. Unified PAM Platform: Delinea's Cloud Suite is a unified Privileged Access Management (PAM) platform that supports multi-cloud environments, enabling dynamic enforcement of PAM policies and consolidation of identities across different directory services such as Active Directory (AD), OpenLDAP, and Azure AD. Dynamic Policy Enforcement: Zero-Downtime Upgrades: Delinea supports zero-downtime upgrades, ensuring that scaling operations do not disrupt access to privileged accounts. This feature is crucial for maintaining continuous security and operational efficiency during scaling events. Customization and Flexibility: Role-Based Access Control (RBAC): Delinea's RBAC allows for granular control over user permissions, which can be adjusted as organizational roles and needs change. This flexibility ensures that access levels can be scaled appropriately without compromising security. Customizable Solutions: Delinea's solutions are highly customizable, allowing organizations to tailor the software to their specific requirements. This customization capability supports both scaling up and down by adjusting features and access controls as needed. Support for Modern and Legacy Systems: Legacy and Modern Infrastructure: While Delinea is designed to support legacy systems like AD and LDAP, it also provides capabilities for modern infrastructure, although there are some limitations in securing cloud-native environments and newer database management systems. Terms and Conditions: Service Agreements: The specific terms for scaling up or down are typically outlined in the service agreements or contracts with Delinea. These agreements would detail the processes, costs, and any limitations associated with scaling the services.

Question 9

The terms & conditions for contract renewal and cancellation

Accepted Answer

Renewal Terms: Automatic Renewal: SaaS Subscriptions, Software Licenses, and Support Services automatically renew for one-year terms unless a notice of non-renewal is provided by the customer. Renewal Window: Renewal processing occurs during the ninety (90)-day period before the expiration of the current term. Delinea provides a renewal quote based on current pricing and customer usage data. Non-Renewal Notice: Customers must notify Delinea in writing at least thirty (30) days prior to the expiration date if they do not wish to renew. This notice must specify the Solution and/or Support Services subject to non-renewal. Pricing: Renewal pricing is based on Delinea’s then-current pricing, which may vary from year to year depending on costs, software and support enhancements, and other factors. Effect of Non-Renewal: Service Termination: If a notice of non-renewal is received by the deadline, the SaaS Subscription, Licensed Software, or Support Services will end as of the last day of the current term. Delinea has no obligation to continue providing services once the term has expired. Cancellation Terms: Termination for Breach: Delinea may terminate the contract if the customer commits a material breach and fails to remedy it within a specified period after being notified. Customer Obligations: Upon termination, the customer must immediately pay all outstanding invoices and cease using the software. They must also remove all copies of the software from their systems and certify in writing that this has been done. Product Trials and Evaluations: License Term and Termination: The term of the Licensed Software includes an initial term of one to three years (or longer if mutually agreed) and each renewal term. The license is non-transferable and non-sublicensable, intended solely for the customer’s internal business purposes.

Question 10

Compliance

Accepted Answer

SO/IEC 27001: This is an internationally recognized standard for information security management systems (ISMS). Zoho Meeting has earned ISO/IEC 27001:2013 certification, covering applications, systems, people, technology, and processes. ISO/IEC 27701: An extension to ISO/IEC 27001 and ISO/IEC 27002, this standard focuses on privacy information management systems (PIMS). It helps organizations demonstrate compliance with various global privacy regulations. ISO/IEC 27017: Provides guidelines for information security controls applicable to cloud services, offering additional implementation guidance for relevant controls specified in ISO/IEC 27002. ISO/IEC 27018: Establishes control objectives, controls, and guidelines for protecting personally identifiable information (PII) in public cloud environments. It extends the controls of ISO/IEC 27001 and ISO/IEC 27002. ISO 9001: This standard specifies requirements for a quality management system (QMS). It demonstrates the ability to consistently provide quality products and services that meet customer and regulatory requirements. ISO 22301:2019: Focuses on business continuity management systems (BCMS), offering guidelines to protect and sustain business operations during potential disruptions. SOC 2 Type II: Evaluates the design and operating effectiveness of controls that meet the AICPA's Trust Services Principles criteria. Zoho Meeting is SOC 2 Type II compliant. SOC 2 + HIPAA: Ensures compliance with the Health Insurance Portability and Accountability Act (HIPAA) for handling healthcare data. Zoho Meeting acts as a 'Business Associate' under HIPAA. ENS (Spain): The National Security Scheme (ENS) in Spain provides a framework for managing and protecting information assets in public administrations. Zoho Meeting is ENS certified with an intermediate category (medium level). GDPR: Complies with the General Data Protection Regulation (GDPR), ensuring the protection of personal data and privacy of EU citizens.

Delinea

Claim Your Profile

Alternatives

Categories Associated