CyberArk Identity

Mimecast & CyberArk Identity

The Mimecast and CyberArk Identity integration connects CyberArk's identity protection events directly to Mimecast's Human Risk Platform, enabling a more comprehensive and accurate view of user risk. By periodically reading SIEM logs containing audit events from CyberArk Identity, the platform automatically associates those events with individual users and updates their identity behavior scores in real time. This integration is available to all Mimecast Engage customers and can be fully deployed in just minutes through the Integration Hub in AdCon.

Mimecast + CyberArk Use Cases

• Enhanced Human Risk Scoring

  Identity protection events from CyberArk are factored into a user's overall risk score, giving security teams a fuller picture of human risk beyond email behavior alone.

• Targeted Security Awareness Training

  Security awareness practitioners can use identity behavior data to trigger targeted training or communications for users exhibiting risky identity-related behaviors.

• Reduced False Positives

  Only CyberArk events that are closed and marked as True Positive are counted against a user's score, ensuring that innocent users aren't unfairly penalized.

• Continuous Identity Monitoring

  From the point of integration onward, the platform continuously ingests new identity events, keeping risk scores current without the complexity of loading historical data.

• Role-Based Access Control

  Organizations can control who configures the integration by restricting setup access to designated administrator roles, maintaining governance over the integration lifecycle.