Для малого бизнеса
+7 (499) 673-37-62

04.04.2024

Аудит действий привилегированных пользователей: как оценить эффективность контроля?

Аудит действий привилегированных пользователей: как оценить эффективность контроля? 
Array
(
    [bSimple] => N
    [bAdmin] => N
    [arForm] => Array
        (
            [ID] => 87
            [TIMESTAMP_X] => 11.10.2022 17:18:10
            [NAME] => Форма на странице SafeInspect
            [SID] => form_safeInspect
            [BUTTON] => Сохранить
            [C_SORT] => 300
            [FIRST_SITE_ID] => 
            [IMAGE_ID] => 
            [USE_CAPTCHA] => N
            [DESCRIPTION] => 
            [DESCRIPTION_TYPE] => text
            [FORM_TEMPLATE] => 
            [USE_DEFAULT_TEMPLATE] => Y
            [SHOW_TEMPLATE] => 
            [MAIL_EVENT_TYPE] => FORM_FILLING_form_safeInspect
            [SHOW_RESULT_TEMPLATE] => 
            [PRINT_RESULT_TEMPLATE] => 
            [EDIT_RESULT_TEMPLATE] => 
            [FILTER_RESULT_TEMPLATE] => 
            [TABLE_RESULT_TEMPLATE] => 
            [USE_RESTRICTIONS] => N
            [RESTRICT_USER] => 0
            [RESTRICT_TIME] => 0
            [RESTRICT_STATUS] => 
            [STAT_EVENT1] => form
            [STAT_EVENT2] => form_safeInspect
            [STAT_EVENT3] => 
            [LID] => 
            [VARNAME] => form_safeInspect
            [C_FIELDS] => 0
            [QUESTIONS] => 18
            [STATUSES] => 1
        )

    [arQuestions] => Array
        (
            [fio] => Array
                (
                    [ID] => 776
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 15.04.2024 16:47:24
                    [ACTIVE] => Y
                    [TITLE] => ФИО
                    [TITLE_TYPE] => text
                    [SID] => fio
                    [C_SORT] => 100
                    [ADDITIONAL] => N
                    [REQUIRED] => Y
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => ФИО
                    [RESULTS_TABLE_TITLE] => ФИО
                    [VARNAME] => fio
                )

            [phone] => Array
                (
                    [ID] => 777
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:36:26
                    [ACTIVE] => Y
                    [TITLE] => Телефон
                    [TITLE_TYPE] => text
                    [SID] => phone
                    [C_SORT] => 200
                    [ADDITIONAL] => N
                    [REQUIRED] => Y
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => Телефон
                    [RESULTS_TABLE_TITLE] => Телефон
                    [VARNAME] => phone
                )

            [email] => Array
                (
                    [ID] => 778
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:36:37
                    [ACTIVE] => Y
                    [TITLE] => E-mail
                    [TITLE_TYPE] => text
                    [SID] => email
                    [C_SORT] => 300
                    [ADDITIONAL] => N
                    [REQUIRED] => Y
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => E-mail
                    [RESULTS_TABLE_TITLE] => E-mail
                    [VARNAME] => email
                )

            [company] => Array
                (
                    [ID] => 779
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:36:51
                    [ACTIVE] => Y
                    [TITLE] => Компания
                    [TITLE_TYPE] => text
                    [SID] => company
                    [C_SORT] => 400
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => Компания
                    [RESULTS_TABLE_TITLE] => Компания
                    [VARNAME] => company
                )

            [comment] => Array
                (
                    [ID] => 780
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:37:02
                    [ACTIVE] => Y
                    [TITLE] => Комментарий
                    [TITLE_TYPE] => text
                    [SID] => comment
                    [C_SORT] => 500
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => Комментарий
                    [RESULTS_TABLE_TITLE] => Комментарий
                    [VARNAME] => comment
                )

            [product] => Array
                (
                    [ID] => 781
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:37:18
                    [ACTIVE] => Y
                    [TITLE] => Продукт
                    [TITLE_TYPE] => text
                    [SID] => product
                    [C_SORT] => 600
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => Продукт
                    [RESULTS_TABLE_TITLE] => Продукт
                    [VARNAME] => product
                )

            [utm_source] => Array
                (
                    [ID] => 782
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:37:39
                    [ACTIVE] => Y
                    [TITLE] => utm_source
                    [TITLE_TYPE] => text
                    [SID] => utm_source
                    [C_SORT] => 700
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => utm_source
                    [RESULTS_TABLE_TITLE] => utm_source
                    [VARNAME] => utm_source
                )

            [utm_medium] => Array
                (
                    [ID] => 783
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:39:55
                    [ACTIVE] => Y
                    [TITLE] => utm_medium
                    [TITLE_TYPE] => text
                    [SID] => utm_medium
                    [C_SORT] => 800
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => utm_medium
                    [RESULTS_TABLE_TITLE] => utm_medium
                    [VARNAME] => utm_medium
                )

            [utm_campaign] => Array
                (
                    [ID] => 784
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:40:13
                    [ACTIVE] => Y
                    [TITLE] => utm_campaign
                    [TITLE_TYPE] => text
                    [SID] => utm_campaign
                    [C_SORT] => 900
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => utm_campaign
                    [RESULTS_TABLE_TITLE] => utm_campaign
                    [VARNAME] => utm_campaign
                )

            [utm_term] => Array
                (
                    [ID] => 785
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:40:24
                    [ACTIVE] => Y
                    [TITLE] => utm_term
                    [TITLE_TYPE] => text
                    [SID] => utm_term
                    [C_SORT] => 1000
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => utm_term
                    [RESULTS_TABLE_TITLE] => utm_term
                    [VARNAME] => utm_term
                )

            [reff] => Array
                (
                    [ID] => 786
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 15:46:34
                    [ACTIVE] => Y
                    [TITLE] => Первый заход
                    [TITLE_TYPE] => text
                    [SID] => reff
                    [C_SORT] => 1100
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => Y
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => Первый заход
                    [RESULTS_TABLE_TITLE] => Первый заход
                    [VARNAME] => reff
                )

            [url] => Array
                (
                    [ID] => 787
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                    [ACTIVE] => Y
                    [TITLE] => url
                    [TITLE_TYPE] => text
                    [SID] => url
                    [C_SORT] => 1200
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => N
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => 
                    [RESULTS_TABLE_TITLE] => 
                    [VARNAME] => url
                )

            [clientidga] => Array
                (
                    [ID] => 788
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                    [ACTIVE] => Y
                    [TITLE] => client-id-ga
                    [TITLE_TYPE] => text
                    [SID] => clientidga
                    [C_SORT] => 1300
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => N
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => 
                    [RESULTS_TABLE_TITLE] => 
                    [VARNAME] => clientidga
                )

            [clientidym] => Array
                (
                    [ID] => 789
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                    [ACTIVE] => Y
                    [TITLE] => client-id-ym
                    [TITLE_TYPE] => text
                    [SID] => clientidym
                    [C_SORT] => 1400
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => N
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => 
                    [RESULTS_TABLE_TITLE] => 
                    [VARNAME] => clientidym
                )

            [gacounterid] => Array
                (
                    [ID] => 790
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                    [ACTIVE] => Y
                    [TITLE] => ga-counter-id
                    [TITLE_TYPE] => text
                    [SID] => gacounterid
                    [C_SORT] => 1500
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => N
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => 
                    [RESULTS_TABLE_TITLE] => 
                    [VARNAME] => gacounterid
                )

            [ymcounterid] => Array
                (
                    [ID] => 791
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                    [ACTIVE] => Y
                    [TITLE] => ym-counter-id
                    [TITLE_TYPE] => text
                    [SID] => ymcounterid
                    [C_SORT] => 1600
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => N
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => 
                    [RESULTS_TABLE_TITLE] => 
                    [VARNAME] => ymcounterid
                )

            [marketing] => Array
                (
                    [ID] => 884
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 11.01.2023 18:38:57
                    [ACTIVE] => Y
                    [TITLE] => Согласие на получение последних новостей компании, сообщений рекламного и информационного характера
                    [TITLE_TYPE] => text
                    [SID] => marketing
                    [C_SORT] => 1700
                    [ADDITIONAL] => N
                    [REQUIRED] => N
                    [IN_FILTER] => N
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => 
                    [RESULTS_TABLE_TITLE] => 
                    [VARNAME] => marketing
                )

            [policy] => Array
                (
                    [ID] => 1434
                    [FORM_ID] => 87
                    [TIMESTAMP_X] => 05.06.2024 13:55:59
                    [ACTIVE] => Y
                    [TITLE] => Cогласие на обработку своих данных согласно политике обработки персональных данных.
                    [TITLE_TYPE] => text
                    [SID] => policy
                    [C_SORT] => 1800
                    [ADDITIONAL] => N
                    [REQUIRED] => Y
                    [IN_FILTER] => N
                    [IN_RESULTS_TABLE] => Y
                    [IN_EXCEL_TABLE] => Y
                    [FIELD_TYPE] => 
                    [IMAGE_ID] => 
                    [COMMENTS] => 
                    [FILTER_TITLE] => 
                    [RESULTS_TABLE_TITLE] => Cогласие на обработку своих данных согласно политике обработки персональных данных.
                    [VARNAME] => policy
                )

        )

    [arAnswers] => Array
        (
            [fio] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1568
                            [FIELD_ID] => 776
                            [QUESTION_ID] => 776
                            [TIMESTAMP_X] => 15.04.2024 16:47:24
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => NOT_FULL
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [phone] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1569
                            [FIELD_ID] => 777
                            [QUESTION_ID] => 777
                            [TIMESTAMP_X] => 11.10.2022 15:36:26
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [email] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1570
                            [FIELD_ID] => 778
                            [QUESTION_ID] => 778
                            [TIMESTAMP_X] => 11.10.2022 15:36:37
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => email
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [company] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1571
                            [FIELD_ID] => 779
                            [QUESTION_ID] => 779
                            [TIMESTAMP_X] => 11.10.2022 15:36:51
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [comment] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1572
                            [FIELD_ID] => 780
                            [QUESTION_ID] => 780
                            [TIMESTAMP_X] => 11.10.2022 15:37:02
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => textarea
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [product] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1573
                            [FIELD_ID] => 781
                            [QUESTION_ID] => 781
                            [TIMESTAMP_X] => 11.10.2022 15:37:18
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [utm_source] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1574
                            [FIELD_ID] => 782
                            [QUESTION_ID] => 782
                            [TIMESTAMP_X] => 11.10.2022 15:37:39
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [utm_medium] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1575
                            [FIELD_ID] => 783
                            [QUESTION_ID] => 783
                            [TIMESTAMP_X] => 11.10.2022 15:39:55
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [utm_campaign] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1576
                            [FIELD_ID] => 784
                            [QUESTION_ID] => 784
                            [TIMESTAMP_X] => 11.10.2022 15:40:13
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [utm_term] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1577
                            [FIELD_ID] => 785
                            [QUESTION_ID] => 785
                            [TIMESTAMP_X] => 11.10.2022 15:40:24
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [reff] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1578
                            [FIELD_ID] => 786
                            [QUESTION_ID] => 786
                            [TIMESTAMP_X] => 11.10.2022 15:46:34
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 0
                            [ACTIVE] => Y
                        )

                )

            [url] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1579
                            [FIELD_ID] => 787
                            [QUESTION_ID] => 787
                            [TIMESTAMP_X] => 11.10.2022 14:52:57
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 100
                            [ACTIVE] => Y
                        )

                )

            [clientidga] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1580
                            [FIELD_ID] => 788
                            [QUESTION_ID] => 788
                            [TIMESTAMP_X] => 11.10.2022 14:52:57
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 100
                            [ACTIVE] => Y
                        )

                )

            [clientidym] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1581
                            [FIELD_ID] => 789
                            [QUESTION_ID] => 789
                            [TIMESTAMP_X] => 11.10.2022 14:52:57
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 100
                            [ACTIVE] => Y
                        )

                )

            [gacounterid] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1582
                            [FIELD_ID] => 790
                            [QUESTION_ID] => 790
                            [TIMESTAMP_X] => 11.10.2022 14:52:57
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 100
                            [ACTIVE] => Y
                        )

                )

            [ymcounterid] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1583
                            [FIELD_ID] => 791
                            [QUESTION_ID] => 791
                            [TIMESTAMP_X] => 11.10.2022 14:52:57
                            [MESSAGE] =>  
                            [VALUE] => 
                            [FIELD_TYPE] => text
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 100
                            [ACTIVE] => Y
                        )

                )

            [marketing] => Array
                (
                    [0] => Array
                        (
                            [ID] => 1676
                            [FIELD_ID] => 884
                            [QUESTION_ID] => 884
                            [TIMESTAMP_X] => 11.01.2023 18:38:57
                            [MESSAGE] => Согласие на получение последних новостей компании, сообщений рекламного и информационного характера
                            [VALUE] => 
                            [FIELD_TYPE] => checkbox
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 100
                            [ACTIVE] => Y
                        )

                )

            [policy] => Array
                (
                    [0] => Array
                        (
                            [ID] => 2241
                            [FIELD_ID] => 1434
                            [QUESTION_ID] => 1434
                            [TIMESTAMP_X] => 05.06.2024 13:55:59
                            [MESSAGE] => Да
                            [VALUE] => Y
                            [FIELD_TYPE] => checkbox
                            [FIELD_WIDTH] => 0
                            [FIELD_HEIGHT] => 0
                            [FIELD_PARAM] => 
                            [C_SORT] => 100
                            [ACTIVE] => Y
                        )

                )

        )

    [arDropDown] => Array
        (
        )

    [arMultiSelect] => Array
        (
        )

    [WEB_FORM_NAME] => form_safeInspect
    [F_RIGHT] => 10
    [FORM_NOTE] => 
    [isFormNote] => N
    [arrVALUES] => Array
        (
        )

    [isFormErrors] => N
    [isAccessFormParams] => N
    [isStatisticIncluded] => Y
    [FORM_HEADER] => 


    [FORM_TITLE] => Форма на странице SafeInspect
    [FORM_DESCRIPTION] => 
    [isFormTitle] => Y
    [isFormDescription] => N
    [isFormImage] => N
    [isUseCaptcha] => 
    [DATE_FORMAT] => DD.MM.YYYY
    [REQUIRED_SIGN] => *
    [FORM_FOOTER] => 

    [QUESTIONS] => Array
        (
            [fio] => Array
                (
                    [CAPTION] => ФИО
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => Y
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1568
                                    [FIELD_ID] => 776
                                    [QUESTION_ID] => 776
                                    [TIMESTAMP_X] => 15.04.2024 16:47:24
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => NOT_FULL
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [phone] => Array
                (
                    [CAPTION] => Телефон
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => Y
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1569
                                    [FIELD_ID] => 777
                                    [QUESTION_ID] => 777
                                    [TIMESTAMP_X] => 11.10.2022 15:36:26
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [email] => Array
                (
                    [CAPTION] => E-mail
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => Y
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1570
                                    [FIELD_ID] => 778
                                    [QUESTION_ID] => 778
                                    [TIMESTAMP_X] => 11.10.2022 15:36:37
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => email
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [company] => Array
                (
                    [CAPTION] => Компания
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1571
                                    [FIELD_ID] => 779
                                    [QUESTION_ID] => 779
                                    [TIMESTAMP_X] => 11.10.2022 15:36:51
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [comment] => Array
                (
                    [CAPTION] => Комментарий
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1572
                                    [FIELD_ID] => 780
                                    [QUESTION_ID] => 780
                                    [TIMESTAMP_X] => 11.10.2022 15:37:02
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => textarea
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [product] => Array
                (
                    [CAPTION] => Продукт
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1573
                                    [FIELD_ID] => 781
                                    [QUESTION_ID] => 781
                                    [TIMESTAMP_X] => 11.10.2022 15:37:18
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [utm_source] => Array
                (
                    [CAPTION] => utm_source
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1574
                                    [FIELD_ID] => 782
                                    [QUESTION_ID] => 782
                                    [TIMESTAMP_X] => 11.10.2022 15:37:39
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [utm_medium] => Array
                (
                    [CAPTION] => utm_medium
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1575
                                    [FIELD_ID] => 783
                                    [QUESTION_ID] => 783
                                    [TIMESTAMP_X] => 11.10.2022 15:39:55
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [utm_campaign] => Array
                (
                    [CAPTION] => utm_campaign
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1576
                                    [FIELD_ID] => 784
                                    [QUESTION_ID] => 784
                                    [TIMESTAMP_X] => 11.10.2022 15:40:13
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [utm_term] => Array
                (
                    [CAPTION] => utm_term
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1577
                                    [FIELD_ID] => 785
                                    [QUESTION_ID] => 785
                                    [TIMESTAMP_X] => 11.10.2022 15:40:24
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [reff] => Array
                (
                    [CAPTION] => Первый заход
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1578
                                    [FIELD_ID] => 786
                                    [QUESTION_ID] => 786
                                    [TIMESTAMP_X] => 11.10.2022 15:46:34
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 0
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [url] => Array
                (
                    [CAPTION] => url
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1579
                                    [FIELD_ID] => 787
                                    [QUESTION_ID] => 787
                                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 100
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [clientidga] => Array
                (
                    [CAPTION] => client-id-ga
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1580
                                    [FIELD_ID] => 788
                                    [QUESTION_ID] => 788
                                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 100
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [clientidym] => Array
                (
                    [CAPTION] => client-id-ym
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1581
                                    [FIELD_ID] => 789
                                    [QUESTION_ID] => 789
                                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 100
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [gacounterid] => Array
                (
                    [CAPTION] => ga-counter-id
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1582
                                    [FIELD_ID] => 790
                                    [QUESTION_ID] => 790
                                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 100
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [ymcounterid] => Array
                (
                    [CAPTION] => ym-counter-id
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1583
                                    [FIELD_ID] => 791
                                    [QUESTION_ID] => 791
                                    [TIMESTAMP_X] => 11.10.2022 14:52:57
                                    [MESSAGE] =>  
                                    [VALUE] => 
                                    [FIELD_TYPE] => text
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 100
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [marketing] => Array
                (
                    [CAPTION] => Согласие на получение последних новостей компании, сообщений рекламного и информационного характера
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => N
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 1676
                                    [FIELD_ID] => 884
                                    [QUESTION_ID] => 884
                                    [TIMESTAMP_X] => 11.01.2023 18:38:57
                                    [MESSAGE] => Согласие на получение последних новостей компании, сообщений рекламного и информационного характера
                                    [VALUE] => 
                                    [FIELD_TYPE] => checkbox
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 100
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

            [policy] => Array
                (
                    [CAPTION] => Cогласие на обработку своих данных согласно политике обработки персональных данных.
                    [IS_HTML_CAPTION] => N
                    [REQUIRED] => Y
                    [IS_INPUT_CAPTION_IMAGE] => N
                    [HTML_CODE] => 
                    [STRUCTURE] => Array
                        (
                            [0] => Array
                                (
                                    [ID] => 2241
                                    [FIELD_ID] => 1434
                                    [QUESTION_ID] => 1434
                                    [TIMESTAMP_X] => 05.06.2024 13:55:59
                                    [MESSAGE] => Да
                                    [VALUE] => Y
                                    [FIELD_TYPE] => checkbox
                                    [FIELD_WIDTH] => 0
                                    [FIELD_HEIGHT] => 0
                                    [FIELD_PARAM] => 
                                    [C_SORT] => 100
                                    [ACTIVE] => Y
                                )

                        )

                    [VALUE] => 
                )

        )

    [SUBMIT_BUTTON] => 
    [APPLY_BUTTON] => 
    [RESET_BUTTON] => 
    [REQUIRED_STAR] => *
    [CAPTCHA_IMAGE] => 
    [CAPTCHA_FIELD] => 
    [CAPTCHA] => 

)

Получить консультацию по Solar SafeInspect

Привилегированные пользователи имеют расширенные права в информационных системах, что позволяет им совершать потенциально рискованные действия: просматривать конфиденциальную информацию, вносить изменения в данные, запускать вредоносные программы, эксплуатировать обнаруженные уязвимости в ИС, удалять или изменять логи, чтобы скрыть несанкционированные действия, менять конфигурацию ИС. В случае попадания данных от учетной записи с расширенными правами в руки злоумышленников угроза информационной безопасности возрастает в разы. Таким образом, аудит действий привилегированных пользователей позволяет снизить риск несанкционированных действий.

кто такие привилегированные пользователи

Кто такие привилегированные пользователи

Речь идет о пользователях с расширенными правами доступа, которые могут управлять значимыми элементами информационных систем. Что касается конкретных сотрудников, то это могут быть разработчики, администраторы ИС, операторы, аудиторы, руководящие лица, аутсорсинговый персонал, техническая служба. То есть все те, кто наделен полномочиями для работы с информационными системами.

Для чего нужен аудит действий привилегированных пользователей

Аудит необходим для комплексного обеспечения информационной безопасности. Даже проверенные сотрудники, которым полностью доверяет руководство, могут умышленно или случайно повредить компоненты инфраструктуры, передать данные третьим лицам, внести нежелательные изменения в сетевые конфигурации, тем самым усилив внутренние и внешние угрозы.

Ручной анализ действий не слишком эффективен, поскольку не охватывает все факторы риска. Между тем уязвимые места во многих компаниях – это слабая парольная политика, использование универсальной учетной записи несколькими сотрудниками, отсутствие смены учетных данных после увольнения работника.

Аудит действий привилегированных пользователей включает в себя:

  • Анализ файловых журналов и накопленной информации.
  • Оценку безопасности процесса авторизации третьих лиц.

Выявление причин ошибок и определение потенциальных угроз.

эффективность контроля привилегированных пользователей

Этапы проведения аудита

Для того чтобы результаты проведенной оценки позволяли формировать полноценную картину о предоставлении привилегированного доступа, необходимо учесть следующее:

  • Обо всех ли привилегированных учетных записях известно достоверно, все ли они контролируются.
  • Появляются ли в инфраструктуре новые устройства и учетные записи и как часто это происходит.
  • Имеются ли обоснования необходимости предоставления привилегированного доступа конкретным сотрудникам.
  • Насколько надежной является действующая парольная политика для привилегированных пользователей.
  • Были ли зафиксированы кибератаки и какие последствия имели данные инциденты.

К сожалению, практически любая организация сталкивалась с угрозами и инцидентами безопасности и дальнейшими сложностями в их расследовании. Аудит позволяет выявлять виновников угроз, слабые места в инфраструктуре, соблюдении правил безопасности, а также в системе контроля.

Аудит действий привилегированных пользователей с помощью PAM-систем

Системы управления расширенным доступом позволяют не только контролировать действия привилегированных пользователей, но и решать задачи в рамках обеспечения безопасности:

  • Разграничивать действия привилегированных сотрудников согласно их полномочиям и задачам. То есть каждому сотруднику выдается определенный перечень прав, минимально необходимых для выполнения той или иной функции.
  • Проводить аудит действий привилегированных пользователей и контролировать их активность во время всех периодов работы.
  • Использовать многофакторную аутентификацию и выполнять защищенное подключение.
  • Оперативно прерывать сессию в случае выявления подозрительной активности и записывать данные для последующего анализа.
  • Проводить расследования и собирать доказательную базу.

Автоматизированное решение значительно снижает риск совместного использования учетных записей и позволяет оценивать уровень безопасности. Для среднего и крупного бизнеса оптимально подходит Solar SafeInspect. Продукт легко внедряется в общую стратегию управления доступом.

Преимущества PAM-системы Solar SafeInspect

  • Гибкая организация доступа под разные задачи, возможность задавать время и периодичность выдачи привилегированного доступа.
  • Быстрое развертывание. Инсталляция и первичная настройка решения занимает 2 часа, не нарушая привычных процессов.
  • Возможность установки в территориально распределенной инфраструктуре, создания единой централизованной точки управления привилегированным доступом.
  • Безопасное хранение данных. Информация о записанных сессиях компактно упаковывается и шифруется.

Заключение

PAM-система Solar SafeInspect – технологичное решение для управления привилегированными учетными записями и сессиями. С помощью функционала платформы гораздо легче соблюдать внутренние политики безопасности, вести детализированный учет поведенческих паттернов пользователей и оценивать эффективность работы службы ИБ. Solar SafeInspect помогает выстроить точные и прозрачные процедуры по соблюдению регламентов, предотвратить угрозы и инциденты безопасности, эффективно проводить расследования.  

ДРУГИЕ СТАТЬИ ПРОДУКТА

Еще больше о наших возможностях

SSH и RDP: распространенные протоколы подключения

SSH и RDP: распространенные протоколы подключения

Узнать больше
Использование привилегированных учетных записей при проведении атак на инфраструктуру

Использование привилегированных учетных записей при проведении атак на инфраструктуру

Узнать больше
Управление доступом к критичным ресурсам компании

Управление доступом к критичным ресурсам компании

Узнать больше
Обеспечение отказоустойчивости PAM-систем в распределенной инфраструктуре

Обеспечение отказоустойчивости PAM-систем в распределенной инфраструктуре

Узнать больше

Для получения бесплатной консультации заполните форму ниже и отправьте заявку. Наш менеджер свяжется с вами в ближайшее время.