| |
Challenges & Goals
Compliance to standards ranging from government mandated security and privacy requirements to internal server configuration baseline requirements represents a daunting challenge to businesses globally. Failure to comply can result in fines, prosecution, malicious access to personal and financial data, and failure of business critical systems. Companies in all areas of business need tools that can:
- Quickly and comprehensively discover all elements that pertain to the rules contained in a standard
- Embody the knowledge of the rules for adopted standards so that operators need not become experts
- Be easily customized and extended based on individual customer environments and policies
- Flexibly report on compliance across the organization at summary and detail levels
- Take actions to quickly and surgically remediate issues discovered in the environment
The Advantage
StealthAUDIT provides an extensive set of base discovery, collection and reporting capabilities combined into a cohesive Compliance Solution. This solution provides very fast discovery and assessment of the environment by virtue of an agent-less architecture. It supplies meaningful reports that enable an organization to find issues quickly and act on them before they have time to severely impact operations or data security. The product also provides a rapidly growing set of workflow and “action module” facilities to enable the remediation process as well as its orchestration and progress tracking.
Key Features and Benefits
StealthAUDIT compliance solution provides a rich and growing set of functions and features that make it a strong and cost effective approach to addressing a broad range of requirements. It is often used for server configuration baseline sets as well as security compliance standard sets. Support for MBSA, select CIS templates, SOX and others are available with the product. The following are key elements found in the Compliance solution:
- Fast and flexible device discovery with dynamic grouping capability to simplify collection targeting
- Deep inspection capabilities for all aspects of hardware, software and content access on targeted devices
- A powerful rules definition and processing engine to articulate specific criteria and related knowledge
- Role based assessment and reporting in provided report sets
- A powerful report authoring facility for customers to customize provided reports or create their own
- Notification and workflow capabilities to formalize and track remediation steps and progress against discovered violations
- Action modules providing the capability to modify configuration elements or contents to bring them into compliance
|
|
|
|