Intended use
Analog Informatics Corporation (AIC) software secures privileged access. It assists an existing cybersecurity program. It does not replace that program, the people who run it, or the plans the organization keeps for an outage.
Who is AIC software for?
AIC software is for commercial organizations and government agencies. There are no consumer uses for this product. It is not licensed for personal, family, or household use.
What experience does it require?
AIC software is very capable and complex. It changes accounts, passwords, access rights, and system settings. If it is set up or used incorrectly, it can cause great harm, such as locking administrators out of their own systems.
We expect each customer to employ people with substantial experience in these areas:
- Cybersecurity
- Identity and access management
- Privileged access management, which controls who can use administrator accounts and when
- Vulnerability management
- Compliance and governance
What if my organization is a small or midsize business?
If your organization is a small or midsize business (SMB), we strongly recommend that you work with a trained Managed Service Provider (MSP), solution provider, or other subject matter expert. The partner can deploy, configure, and operate the software for you. See Partners to find one.
How do I plan for times when the software is not available?
Always keep a break-glass strategy. A break-glass strategy is a way to reach and operate your systems when AIC software is not working, is disabled, or cannot be reached. It usually includes:
- Emergency administrator credentials stored outside AIC software, under your own controls
- A written procedure that says who may use those credentials and when
- A record of each emergency use, followed by a password change
Test the break-glass strategy on a regular schedule, the same way you test backups.
Is AIC software suited to mission-critical use?
Yes. AIC software secures privileged access to the business-critical and mission-critical systems your organization depends on. Keep a break-glass strategy for those systems, as described above, so that no single tool is the only way in.
Is AIC software suited to life-safety use?
No. AIC software is not fault-tolerant and is not designed or certified for high-risk use. High-risk use means any activity or environment that requires fail-safe performance, or any use where a failure of the software could lead to death, serious personal injury, environmental harm, or significant property damage. Examples include systems that directly control medical life support, aircraft flight, or nuclear facility operations. The customer accepts all risk for any such use.
Who is responsible for access to the software?
The customer is responsible for:
- Making sure only appropriate people have access to AIC software
- Making sure those people are trained in its proper use
- Making sure passwords, tokens, and sign-in procedures for AIC software are used properly
Section 3.3 of the AIC Software License Terms states these terms.