Managed Security: LastPass MSP (Password Management)

What’s Included

After the initial implementation described in the Onboarding section, Managed Solution will provide managed LastPass Password Management services to continuously secure Client’s password and credential repository. We will oversee password management operations, including monitoring, policy enforcement, user administration, user support, and system maintenance to ensure credential security and operational continuity.
Services include:
  • Managed Solution will manage the full lifecycle of user accounts within the LastPass platform, including provisioning and deprovisioning users, managing group assignments and role-based access controls, and administering user vaults in accordance with Client’s organizational changes and data retention policies. We will ensure that departing users are promptly deprovisioned and that vault data is handled in accordance with Client’s offboarding procedures.
  • Managed Solution shall manage shared credentials within LastPass Shared Folders, including enforcing rotation schedules, configuring expiration policies, and applying least-privilege permissions to ensure that access to shared credentials is restricted to authorized users and groups. We will coordinate with Client to identify credentials requiring rotation and ensure that updates are implemented in a timely manner.
  • Managed Solution shall monitor LastPass security alerts, dark-web breach notifications, and vault-usage anomalies on an ongoing basis. Verified breach notifications or high-risk findings will be promptly escalated to Client’s designated contacts, and we will assist in remediating affected credentials in accordance with applicable incident response procedures.
  • Managed Solution will ensure that LastPass platform updates and policy configurations are applied in a timely manner and that the environment remains aligned with LastPass best practices and our standard security configurations. We will proactively identify and recommend security improvements as the threat landscape or LastPass platform capabilities evolve.