RSA was one of the products we evaluated. The IBM product was another. BeyondTrust was chosen simply because of the ability to give and remove privileges quickly. That was the main difference. From an ISO 27701 standpoint, that is the difference maker.

I give the solution a nine out of 10 because it has some features that other products don't have yet, differentiation that sets it apart in the marketplace. The solution is able to get some companies to a compliance standpoint they would not get to otherwise. Those features are a centralized dashboard and the ability to issue and revoke entitlements within minutes. That makes a difference.

We did take a look at several other products, but we finalized on BeyondTrust. We looked at some of the Microsoft solutions, and we also looked at some of the CyberArk solutions to do a comparison. What was more interesting with BeyondTrust was the flexibility in the policies. The clarity in the policy writing was a little better, and the deployment of the solution was easier. The overall product simplicity was fairly okay. When you're going from a hardcore local admin to a zero local admin stage, simplicity in the product is extremely important. So, simplicity and flexibility were the key factors.

I've looked into Broadcom to see if it could resolve some issues we were having under this product.

We evaluated Avecto.

My company first chose the IBM Identity Manager suite. Later on, we surveyed the market and the needs and requirements of the clients. We thought the IBM solution was utilizing too many resources to achieve a very limited goal. The requirements are related to PAM, but they were employing IM.

• Avecto
• Thycotic
• Viewfinity

I've actually looked at ARCON and BeyondTrust. Now I'm working with BeyondTrust implementation.

Features-wise, BeyondTrust is a lot better than ARCON. ARCON, even with limited features, is still good, but the number of features and scope of its privilege control is limited.

BeyondTrust Password Safe works for critical assets and servers. For endpoints, it offers PowerBroker and Bomgar, which is for privilege remote access and control. I think that the suite of BeyondTrust covers a good landscape. ARCON is limited.

Yes, CyberArk, CA.

We didn't evaluate other options. We were already using BeyondTrust and it seemed a natural extension to add this solution as well.