Name: Don't Trust, Just Verify: Leostream's Zero-Trust Playbook for Vendors
Uploaded: 2025-02-17T08:22:27-05:00
Duration: 14 min 38 s
Description: In this conversation, Mike Matchett from Small World Big Data sits down with Karen Gondoly, CEO of Leostream, to explore vendor privileged access management.

Question 1

What is Leostream?

Accepted Answer

Leostream is a company that specializes in providing secure remote desktop access solutions. They focus on ensuring that third-party vendors can access necessary resources without compromising the security of corporate networks.

Question 2

How does Leostream help manage third-party vendor access?

Accepted Answer

Leostream offers solutions that allow companies to manage third-party access securely through their Privileged Remote Access Service. This service ensures that vendors can access only the specific resources they need without exposing secure credentials or data.

Question 3

What is zero trust security, and how does Leostream implement it?

Accepted Answer

Zero trust security is a strategic approach to cybersecurity that denies access to all users until they can be verified. Leostream implements zero trust by ensuring that third-party vendors do not receive actual network credentials and by monitoring and recording their activities to prevent unauthorized access.

Question 4

Can Leostream record vendor activities?

Accepted Answer

Yes, Leostream can record all activities of vendors. This includes everything from keystrokes to full visual recording of the desktops they access, depending on the connection type, whether it's SSH, VNC, or RDP.

Question 5

What industries can benefit from using Leostream?

Accepted Answer

Any industry that relies on third-party vendors for IT tasks can benefit from Leostream’s solutions, especially industries like media and entertainment, healthcare, and technology, where secure data access is critical.

Question 6

How does Leostream ensure data never leaves the corporate environment?

Accepted Answer

Leostream routes all desktop traffic through the customer's hosted gateway, not through Leostream’s network, ensuring that all data remains within the customer’s control and environment.

Question 7

What is the difference between Leostream’s services for employees and vendors?

Accepted Answer

While Leostream’s services for employees focus on providing secure, remote access to corporate resources, their services for vendors are specifically designed to offer controlled and limited access based on specific, audited permissions without integrating vendors into the corporate identity infrastructure.

Question 8

How quick is the setup process for Leostream’s vendor management solutions?

Accepted Answer

Leostream’s vendor management solutions can be set up rapidly, with vendors being able to start accessing necessary resources within an hour, thanks to the streamlined, hosted service provided by Leostream.

Question 9

What are the compliance benefits of using Leostream for vendor access?

Accepted Answer

Leostream helps ensure compliance by maintaining strict access controls, recording all vendor activities, and preventing credential leaks, which aligns with regulatory requirements for data protection and privacy.

Question 10

How does Leostream handle the offboarding of third-party vendors?

Accepted Answer

Leostream allows for time-limited access, meaning that vendor permissions can be set to expire after a certain period, ensuring that access is automatically revoked when no longer needed or when a project concludes.

The Invisible Threat: How Polymorphic Malware is Outsmarting Your Email Security

The Next Generation of Managed Data Security Services

CMMC Level 2 Assessment Insights: Expectations from an OSC and C3PAO Assessor

Energize Your Connections with Netskope and Presidio Insights

Maximize Revenue Opportunities with Druva’s Microsoft Expansion in APAC

360View: 2026 IT Predictions & Emerging Trends

Rethinking Hybrid Access: Securing Users, Vendors, and Infrastructure in the Zero Trust Era

Microsoft Advanced Group Policy Management (AGPM) End of Life: Your Practical Migration Playbook

Cut Ticket Resolution Time in Half with Smarter IT Documentation

CMMC Certification: Next Steps for Continuous Monitoring and Management

Deep Packet Inspection (DPI) Insights within Endpoint Protector Learning Lab

HUMAN Dialogue: Cultivating Trust Amidst the Rise of Agentic Commerce