Security controls for access to administrative systems should match the elevated threat they face. Privileged Access Workstations (PAWs) should ideally be locked-down to a known-good state, and only be used for administrative purposes, with no access to email, internet or other less-trusted resources.
Using general purpose operating systems as PAWs can be a complex and costly task. Working with UK Government, Becrypt have developed an endpoint platform specifically designed for secure desktop applications, avoiding commodity attacks, and resistant to the elevated threat that government and the critical national infrastructure are subject to.