Deploying Privileged Access Management for a Metropolitan Council
A metropolitan local government authority engaged Modern 42 to design and implement a Privileged Access Management solution, securing critical infrastructure and reducing operational risk across its environment.
At a glance
- BeyondTrust deployed
- Vendor access off Citrix
- Essential Eight aligned
The situation
This council was looking to reduce operational risk and secure its critical infrastructure by restricting administrative privileges, ensuring privileged sessions were initiated securely, and putting appropriate monitoring in place for privileged activities.
At the same time, the council needed a solution that could be fully documented and transferred to its internal technical team for ongoing management.
What we did
- 01
Design and Deployment
Modern 42 worked directly with council staff to understand the environment and business requirements, then designed and deployed a BeyondTrust solution tailored to those needs. We delivered environment and business requirements analysis, detailed design of the BeyondTrust solution (Password Safe and Privileged Remote Access), implementation in accordance with the approved design, as-built documentation, and handover to internal technical staff including Standard Operating Procedures and knowledge transfer.
The outcome
Modern 42 successfully deployed and transitioned a BeyondTrust PAM capability (Password Safe and Privileged Remote Access) into production service for the council.
In a subsequent engagement, we extended the solution to cover vendor access management, migrating external vendors off a legacy Citrix solution. This delivered improved visibility and compliance around security controls for third-party access, while also reducing double-run costs.
Key wins
- Deployed BeyondTrust PAM solution aligned to ASD Essential Eight requirements for restricting administrative privileges
- Complete knowledge transfer and SOPs enabled self-sufficient internal operations
- Subsequent engagement extended PAM to vendor access, replacing a legacy Citrix solution
- Improved compliance visibility and security controls for third-party privileged access
- Reduced double-run costs through legacy platform decommission