Resources
Notes from the team that builds SWOT
Practical guides on privileged access, database security, cloud access and compliance, written by the engineers behind the products.
Start with the basics · Privileged accessWhat is privileged access management? A practical guideWhat is privileged access management? Learn the account types, core PAM controls, how PAM differs from IAM and IGA, and a checklist to get started.Read the article Start here
More articles
Business appsInventory management software evaluation: a buyer's guideInventory management software evaluation: architecture options, a lifecycle checklist, vendor questions and SyncVentory's answers. Score your shortlist.
Business appsInventory management system deployment: sizing SyncVentoryInventory management system deployment for SyncVentory: documented sizing tiers, Docker Compose or Kubernetes, connections and backups. Plan yours.
Database securityDatabase activity monitoring buyer's guide: how to evaluateA database activity monitoring buyer's guide: criteria, vendor questions, a scoring template and a proof-of-concept plan. Use it on your DAM shortlist.
CompliancePCI DSS 4.0 privileged access checklist: Req. 7, 8 and 10A PCI DSS 4.0 privileged access checklist: Requirements 7, 8 and 10 mapped to controls and evidence, checked against v4.0.1. Use it before your assessment.
Privileged accessVerizon DBIR 2024: privileged access risk and what to doWhat the Verizon DBIR 2024 says about privileged access: stolen credentials, insiders, third parties and exploits, each with the PAM control to review.
Business appsReal-time HRMS architecture: a worked example with SWOT HRReal-time HRMS architecture explained: data model, live attendance, payroll runs, roles and integrations, with SWOT HR as a worked example. Read the guide.
Privileged accessPAM for DevOps: securing CI/CD pipelines and machine accessPAM for DevOps: replace pipeline secrets with short-lived credentials, gate infrastructure as code, approve production changes and keep an audit trail.
Cloud securityZero trust PAM in AWS: a step-by-step implementation guideZero trust PAM in AWS, step by step: IAM Identity Center, temporary credentials, SCPs, CloudTrail and session controls, plus a checklist. Plan yours.
Business appsHRMS evaluation checklist: questions, scoring and evidenceAn HRMS evaluation checklist with requirements, demo questions and a weighted scoring table, plus SWOT HR's documented answers. Use it on your shortlist.
Privileged accessPAM deployment architecture: VM vs Kubernetes and sizingPAM deployment architecture explained: standalone VM or Kubernetes, high availability, sizing inputs, network placement and air-gapped installs. Read on.
Privileged accessPAM buyer's guide: how to evaluate PAM vendors and toolsA neutral PAM buyer's guide: evaluation criteria, questions for every vendor, a weighted scoring template and proof-of-concept tests. Score your shortlist.
Business appsHRMS architecture comparison: SaaS, self-hosted, modularAn HRMS architecture comparison of multi-tenant SaaS, single-tenant, on-premises, suite and modular designs, with trade-offs. See where SWOT HR fits.
Privileged accessAI privileged access management: what it does and its limitsAI privileged access management explained: baselines, risk scoring, plain-English requests and summaries, the risks, and how to test vendor AI claims.
Database securityWhat is database activity monitoring? A practical guideWhat is database activity monitoring? Learn what DAM records, how the four collection methods compare, DAM vs SIEM vs DLP, and a checklist for rollout.
Privileged accessZero standing privileges (ZSP): definition and how to startZero standing privileges explained: what ZSP is, how it differs from JIT and least privilege, and a staged plan to remove standing admin access. Read on.
Cloud securityJust-in-time access in the cloud: AWS, Azure and GCP guideHow just-in-time access works in the cloud on AWS, Azure and GCP: request, approve, expire and revoke, with no standing roles or long-lived keys. Read on.
Database securityAI data discovery for PII and PHI: how LLMs classify columnsHow AI data discovery finds PII and PHI from column names and types, where it falls short, and how it compares with regex and sampling. Read the guide.
Business appsEOD automation for banking: end-of-day batch playbookEOD automation for banking: why end-of-day batch runs fail, how approval gates, retries and an audit ledger help, plus a runbook checklist. Read on.
No articles match that search.
Glossary
Plain definitions of the terms in these articles.
New articles by e-mail
One message when we publish. Unsubscribe at any time.