簡化企業(yè)IT合規(guī)審計

RSAenVision幫您降低企業(yè)內(nèi)部控制本錢，提升平安總在不斷變化的合規(guī)環(huán)境PCIDSSHIPAAInternalPolicyGLBAHSPD12CSB1386CountryPrivacyLawsSOXEUCDRUKRIPAFISMACOCOMDataSecurityActFACTAEUDataPrivacyFFIECBASELIIC-SOXIRS97-22NERCNISPOMPartnerRulesACSI33NIST800StatePrivacyLaws接下來還有…??

紛繁的&昂貴的IT合規(guī)PCIDSSComplianceBaselIIComplianceInternalPolicyComplianceDataPrivacyRegulationCompliancePartnerPolicyComplianceNetworkEndpointApp/DBStorageFS/CMSEncryptionMonitoringAuthenticationPolicyEncryptionMonitoringNACAccessControlAuthenticationLogManagementDataLeakageAccessControlMonitoringAuthenticationMonitoringEncryptionGartner評估認(rèn)為一個接一個的規(guī)章制度，企業(yè)連續(xù)投入的資源相當(dāng)與合規(guī)平均投入的150%，很大程度上是由于重復(fù)勞動!“GartnerforITLeadersOverview:TheITComplianceProfessional.〞FrenchCaldwell.October22,2007基于框架的平安〔Framework-BasedSecurity〕

消除您平安管理中的漏縫FrameworkBasedSolutions 全面的檢查清單 控制手段 平安整體視圖內(nèi)部策略框架財務(wù)資料個人信息知識產(chǎn)權(quán)員工檔案補丁式解決方案信用卡數(shù)據(jù)健康記錄基于框架的平安

信息風(fēng)險管理實現(xiàn)EndpointNetworkApps/DBFS/CMSStorageSensitiveInformationSecurityIncidentsBusinessInitiativesITSystemsRisk企業(yè)范圍的控制框架Framework-basedsecurityensuresyourorganizationispreparedtocomprehensivelymitigateandmanageinformationrisk持續(xù)一致 提供平安根底，實現(xiàn)對數(shù)據(jù)類似的平安風(fēng)險采用類似的控制手段進行保護全面整合 確保企業(yè)能夠采用適當(dāng)?shù)目刂剖侄芜M行全面的風(fēng)險管理以減低風(fēng)險經(jīng)濟高效縮減冗余控制手段，獲取技術(shù)投入的最大回報NetworkEndpointApp/DBStorageFS/CMS加密密鑰管理加密加密加密加密加密數(shù)據(jù)防喪失監(jiān)控,報表,審計PCIDSSComplianceBaselIIComplianceInternalPolicyComplianceDataPrivacyRegulationCompliancePartnerPolicyCompliance身份認(rèn)證訪問控制基于框架的平安合規(guī)

實現(xiàn)經(jīng)濟、高效的合規(guī)適用于合規(guī)的內(nèi)控平安框架流程根據(jù)合規(guī)要求，確定IT內(nèi)控范圍根據(jù)內(nèi)控范圍進行資產(chǎn)盤點和風(fēng)險評估執(zhí)行內(nèi)部IT審計內(nèi)控審計報告基于框架的合規(guī)流程

RSA&EMCSolutions資產(chǎn)目錄&風(fēng)險評估RSADataLossPreventionRSAProfessionalServicesRSAPartners策略&分級RSAProfessionalServicesRSAPartners發(fā)現(xiàn)識別RSADataLossPreventionRSAProfessionalServicesEMCSMARTSADM執(zhí)行控制框架RSAAuthentication&AuthorizationRSADataSecurityRSAInformationandEventManagementEMCInformationManagementSolutions監(jiān)控，管理&提升RSAInformationandEventManagementRSAProfessionalServicesRSAPartnersRSAenVision——

3合1的信息事件管理平臺ServerEngineeringBusinessOps.ComplianceAuditApplication&DatabaseNetworkOps.RiskMgmt.SecurityOps.DesktopOps.日志管理AnyenterpriseIPdevice–UniversalDeviceSupport(UDS)Nofiltering,normalizing,ordatareductionSecurityevents&operationalinformationNoagentsrequired簡化合規(guī)AccessControlConfigurationControlMaliciousSoftwarePolicyEnforcementsUserMonitoring&ManagementEnvironmental&TransmissionSecurity提升平安降低風(fēng)險AccessControlEnforcementSLAComplianceMonitoringFalsePositiveReductionReal-timeAlertsUnauthorizedNetworkServiceDetectionPrivilegedUserMonitoring優(yōu)化IT運營MonitornetworkassetsTroubleshootnetworkissuesAssistwithHelpdeskoperationsOptimizenetworkperformanceGainvisibilityintouserbehaviorBuildbaselineofnormalnetworkactivityReportAlert/CorrelationIncidentMgmt.LogMgmt.AssetIdent.ForensicsBaselineAlltheDATA

平安審計的目的是：

對重要數(shù)據(jù)的有效系統(tǒng)控制AnauditorwillwanttoseeallthecriticalpathstowardsfinancialaccountinginformationIDS/IDPlogsVPNlogsFirewalllogsClient&fileserverlogsWindowsdomainloginsOracleFinancialLogsSANfileAccessLogsMainframelogsDatabaseLogsVAScanlogsSwitchlogs3in1日志管理平臺——簡化合規(guī)

RobustAlerting&Reporting內(nèi)置超過1400+報表模板易于定制已根據(jù)標(biāo)準(zhǔn)進行分組,如國家法律(SOX,BaselII,JSOX),行業(yè)標(biāo)準(zhǔn)(PCI),最正確實踐和標(biāo)準(zhǔn)(ISO27002,ITIL)3in1日志管理平臺——提高平安

Supportthe3keyaspectsofSecurityOperations

將實時事件，如平安威脅信息，轉(zhuǎn)換成可執(zhí)行的數(shù)據(jù)

創(chuàng)建閉環(huán)的事件處理流程SIEMtechnologyprovidesreal-timeeventmanagementandhistoricalanalysisofsecuritydatafromawidesetofheterogeneoussources.Thistechnologyisusedtofilterincidentinformationintodatathatcanbeactedonforthepurposesofincidentresponseandforensicanalysis.

MarkNicolette,Gartner

報告安全管理效果3in1日志管理平臺——優(yōu)化IT和網(wǎng)絡(luò)運行

異常識別,易于排錯EMCCelerraSystemShutdownSystemFailure企業(yè)內(nèi)控合規(guī)報表審計RSAenVisionReport:密碼變更和過期RSAenVisionReport:操作變更控制RSAenVisionReport:禁用帳號報表

CompliancePackagesRSAenVision內(nèi)置提供了以下10大類的合規(guī)審計報表模板:BASELII

-InternationalConvergenceofCapitalMeasurementandCapitalStandards

Bill198

FederalInformationSecurityManagementAct(FISMA)

Gramm-Leach-BilleyAct(GLBA)

HealthInsurancePortabilityandAccountabilityAct(HIPAA)

ISO27002

NERC

NationalIndustrialSecurityProgramOperatingManual(NISPOM)

PaymentCardIndustry(PCI)DataSecurityStandard

StatementonAuditingStandardsNo.70(SAS70)

Sarbanes-OxleyAct(SOX)

RSAenVision——

3合1的日志管理平臺ServerEngineeringBusinessOps.ComplianceAuditApplication&DatabaseNetworkOps.RiskMgmt.SecurityOps.DesktopOps.日志管理AnyenterpriseIPdevice–UniversalDeviceSupport(UDS)Nofiltering,normalizing,ordatareductionSecurityevents&operationalinformationNoagentsrequired簡化合規(guī)AccessControlConfigurationControlMaliciousSoftwarePolicyEnforcementsUserMonitoring&ManagementEnvironmental&TransmissionSecurity提升平安降低風(fēng)險AccessControlEnforcementSLAComplianceMonitoringFalsePositiveReductionReal-timeAlertsUnauthorizedNetworkServiceDetectionPrivilegedUserMonitoring優(yōu)化IT運營Monitornetworkass