Security Audit Framework
Unprecedented Guidance for Helping You Meet Stringent Compliance Requirements
nFX SIM One is the only security information and event management application that incorporates a powerful Security Audit Framework that that provides unprecedented guidance for managing and reporting on critical IT security issues, as well as compliance with regulatory requirements and standards. The integration of the new security audit framework enables netForensics to deliver the market’s most comprehensive solution for managing and reporting on IT security and third-party compliance requirements.
Modules that address specific regulations, such as PCI, Sarbanes-Oxley, HIPAA and FISMA, easily plug into the framework for quick deployment and rapid time to value.
The new audit framework and out-of-the-box modules seamlessly integrate into nFX SIM One through a new web-based interface. Other information security management and log management vendors enable their users to report on the data that is collected, but put the onus on the end user to “connect the dots” for interpreting, taking action against and reporting on this information. The netForensics solution provides end users with a detailed checklist and reports that they can provide to an auditor explaining exactly how affected devices are configured and what is being reported on.
Guidance is provided that tells the user what affected devices they should be concerned with, how to group them for compliance monitoring within the SIM application, and what data to monitor based on the specific sections of the various regulations and standards. Through the new framework, the modules include:
- Knowledge-base guidance that details what an affected customer must monitor and report on
- Detailed, step-by-step instructions for configuring, aligning, and monitoring devices and other resources affected by the relevant regulation or standard
- Advanced correlation rules and report templates needed to speed deployment
|
