KPMG and CyberArk Join Forces to Help Clients Bolster Cyber Security Strategies

October 4, 2016

Alliance Will Help Reduce the Attack Surface Through Implementing Advanced Privileged Account Security Solutions and Leading Practices

New York and Newton, Mass., October 4, 2016 – KPMG LLP and CyberArk (NASDAQ: CYBR) today announced an alliance relationship to help clients reduce the risk of cyber attacks by implementing a comprehensive privileged account security solution and driving adoption of leading practices to better protect against insider threats and external attackers.

The alliance combines the experience of KPMG Cyber Security Services, a leading Information Security Consulting team, with CyberArk’s market-leading privileged account security technology solutions.

Increasingly, CIOs are prioritizing privileged account security, making it a central component of their risk management strategies. The KPMG and CyberArk offering focuses on three phases: Strategic planning to understand client needs and develop a comprehensive approach; privileged account security technology implementation and process development to configure the solution and develop supporting policies and procedures; and ongoing operational support involving end-user training and monitoring, altering and automating capabilities that reduce manual processes.

“A common thread across breaches is the compromise of administrative-level credentials, which hold the ‘keys to the IT kingdom’ and are the preferred target of external attackers and malicious insiders,” says Kyle Kappel, Advisory principal, KPMG Cyber Security Services. “Based on client demand, we have formed this alliance relationship with CyberArk to help our clients protect and monitor access, as well as detect, alert, and respond to privileged account threats ‒ before irreparable damage happens.”

According to the CyberArk Global Advanced Threat Landscape Survey, privileged account takeover is one of the most difficult stages of a cyber attack to mitigate. Privileged accounts and credentials provide a pathway to an organization’s high-value digital assets and are consistently exploited in nearly all advanced cyber attacks.  Privileged accounts are used by powerful applications and users, like IT system administrators, and can be compromised to modify system configurations, access sensitive information and even cause disruptions that can shut down a business.

“As cyber attacks become more aggressive and damaging, organizations recognize the need to prioritize privileged account security in order to instill trust and reliability in a network,” says Scott Whitehouse, vice president channels and alliances at CyberArk. “Together with KPMG, we can help clients develop and implement proactive privileged account security programs that prioritize threat reduction, minimize enterprise risk and provide measurable results that resonate with C-level stakeholders.”

To learn more, visit and

KPMG LLP, the audit, tax and advisory firm (, is the U.S. member firm affiliated with KPMG International Cooperative (“KPMG International”). KPMG member firms have 174,000 professionals, including more than 9,000 partners, in 155 countries.  Some or all of the services described herein may not be permissible for KPMG audit clients and their affiliates.