Estonia’s Interior Ministry IT Centre Chooses PrivX Just-in-Time PAM to Protect Access to Sensitive Data

SSH Communications Security (SSH) announces that they have won a new, medium-sized deal for their PrivX Just-in-Time Privileged Access Management (PAM) solution that keeps organizations secure and people productive. The customer is the IT and Development Centre, Ministry of the Interior (Estonian: Siseministeeriumi infotehnoloogia- ja arenduskeskus, SMIT) which is an Estonian government agency under the Ministry of the Interior. The agency is responsible for providing and developing ICT services mainly to Police and Border Guard Board, Estonian Rescue Board, Estonian Emergency Response Centre, Estonian Academy of Security Sciences and the Ministry of the Interior.
 
“Estonia has been at the forefront of digital transformation with strong focus on security. We needed a solution that would support both legacy and modern cloud environments, scale as the environment is developed, offer multiple authentication methods and can support access to various targets, like web applications, servers and switches. Now with PrivX, we can centrally manage and ensure that only authorized personnel can access critical systems, with the minimum privileges necessary and without granting permanent authorizations to anyone. We get a full audit trail of all activities, can record sessions and monitor them live if needed to fully align with our internal policies and comply with regulations such as NIS2 and GDPR,” states Siim Vene, Chief Infrastructure Architect at SMIT.
 
“I’m happy to see that organizations handling mission-critical data continue to find value in our privileged access management solution. Public organizations face an increased threat from malicious groups, rogue individuals as well as nation sponsored actors with a mission to steal and exploit sensitive information. Ministries handle a lot of critical and sensitive data, including forensic evidence, passports, biometric data, criminal records, investigation files, infrastructure vulnerability assessments, and personnel records of government employees,” states Rami Raulas, CEO of SSH.
 
“PrivX puts access to valuable data under strict governance, minimizes the attack surface by allowing only one controlled way for access. The solution radically reduces the risk of credentials and secrets ending up in the wrong hands, enabling the migration to passwordless, ephemeral certificate-based authentication,“ Raulas concludes.
 
PrivX has a flexible, modern microservice architecture that makes it a great fit for cloud environments or on-premises alike. When deployed in Kubernetes environment this enables auto-scaling, high performance and agility and granting customers full control of their data and complete data sovereignty.

Learn more about PrivX here.