Cyderes PAM SwiftShield

Cyderes PAM SwiftShield Implementation – Scoping Letter (Condensed Description) The Cyderes PAM SwiftShield engagement is designed to implement CyberArk’s Privileged Access Management (PAM) Privilege Cloud solution, focusing on foundational deployment, secure configuration, and operational readiness. This initiative aims to reduce privileged access risks, enhance compliance, and improve the customer’s overall security posture through a structured, best-practice-aligned approach. Engagement Goals The primary goal is to deploy and configure CyberArk’s SaaS-based PAM solution within the customer’s environment. This includes enabling core functionalities, integrating with enterprise systems, and preparing the environment for secure and efficient operations. Purpose Cyderes will assist the customer in planning, deploying, and configuring the Privilege Cloud solution, while also providing guidance on administration and adoption of PAM use cases to ensure long-term success. Scope of Work 1. Discovery and Planning * Review organizational goals, success criteria, and PAM priorities. * Assess risks and controls using CyberArk Blueprint recommendations. * Define project roles and responsibilities. * Review integrations (e.g., directory services, authentication, monitoring). * Evaluate system requirements and deployment readiness. * Conduct a PAM Architecture Workshop and deliver a draft architecture diagram. 2. Privileged Cloud Deployment * Assist with installation and configuration of: Up to two (2) Privilege Cloud Connector Servers with optional load balancing. * One (1) CyberArk Identity tenant for MFA and SSO. * One (1) Remote Access tenant with up to two (2) Connectors, HTML5 access, and mobile app setup. * Validate out-of-box functionalities of the Privilege Cloud environment. * Configure integrations including: Remote Access for one (1) licensed user. SIEM integration via Syslog for audit logs. Email notifications for PAM activities. * Test credential and session management for up to two (2) accounts each on Windows and Unix platforms. * Test Offline Access for up to two (2) users, including configuration updates. * Provide overview sessions for Vault and Customer Administrators covering: User interface, onboarding, and Offline Access settings. Platform configuration, Master Policy design, reporting, and documentation. 3. Expand and Secure * Review previously defined objectives. * Assist with onboarding privileged credentials, including: Planning and testing of up to five (5) accounts and one (1) connection component on a supported platform. * Demonstrate vendor access use case: Walkthrough of vendor invitation and onboarding. Mobile app setup and connectivity validation. Offline Access credential storage verification. * Review PAM auditing, reporting, and monitoring capabilities. Deliverables All professional services are delivered at the customer’s direction, with no predefined deliverables. This flexible approach ensures alignment with the customer’s specific needs and priorities throughout the engagement.