The CyberArk service provides password manager and Privilege Access Management (PAM) functionality and controls for users, accounts, processes, and systems at UW–‍Madison. By dialing in the appropriate level of privileged access controls, PAM helps UW–‍Madison condense our attack surface, and prevent, or at least mitigate, the damage arising from external attacks as well as from insider malfeasance or negligence. PAM is considered by many analysts and technologists as one of the most important security projects for reducing cyber risk.