What’s Included
Managed LastPass Password Management services are provided to support ongoing security of password and credential repositories.
Ongoing oversight includes password management operations, including monitoring, policy enforcement, user administration, user support, and system maintenance to support credential security and operational continuity.
Services include:
- Management of the full lifecycle of user accounts within the LastPass platform, including provisioning and deprovisioning users, management of group assignments and role based access controls, and administration of user vaults in accordance with organizational changes and applicable data retention policies
- Prompt deprovisioning of departing users, with vault data handled in accordance with applicable offboarding procedures
- Management of shared credentials within LastPass Shared Folders, including enforcement of rotation schedules, configuration of expiration policies, and application of least privilege permissions to help ensure access to shared credentials is limited to authorized users and groups
- Coordination to identify credentials requiring rotation and support timely implementation of credential updates
- Ongoing monitoring of LastPass security alerts, dark web breach notifications, and vault usage anomalies
- Prompt escalation of verified breach notifications or high risk findings to designated contacts, along with assistance in remediating affected credentials in accordance with applicable incident response procedures
- Application of LastPass platform updates and policy configurations in a timely manner to help ensure the environment remains aligned with LastPass best practices and standard security configurations
- Proactive identification of potential security improvements and recommendations as the threat landscape or LastPass platform capabilities evolve