|
Organizations face a myriad of evolving regulations
governing information protection, internal controls and
endpoint risk management. Corporate compliance officers are
tasked with the day-to-day management of policy or
regulatory compliance, ensuring that issues within the
organization are appropriately evaluated, investigated and
resolved.
Sarbanes Oxley, HIPAA, PIPEDA, GLBA, CA SB1386, FISMA,
PCI/CISP, EU, Basel II, NERC are all listed as regulations
that require their compliance from a security perspective¹.
These standards require different security measures and
processes to be enforced around data protection and system
integrity, and also require detailed audit trails that prove
regulatory or policy compliance. While enterprises face
mounting threats from external and inside forces, compliance
officers must ensure that policies are established and
enforced throughout the organization, in order to maintain
system integrity and confidentiality of intellectual
property, personal medical records, classified data, or
financial information. Without the proper security
management solution, compliance officers are not provided
with the capabilities to effectively perform the duties of
their job, such as:
- Identifying
potential areas of
compliance vulnerability
and risk
- Developing and
implementing corrective
action plans for
resolution of
problematic issues
- Providing general
guidance on how to avoid
or deal with similar
situations in the future
- Delivering reports
on a regular basis to
senior management and if
necessary to external
auditors
Lumension Security Management Solutions Assure Compliance at the Endpoint
Lumension’s security management software is designed to
protect the integrity, confidentiality and availability of
sensitive data throughout the network in alignment with
internal company policies as well as with regulations.
Enabling compliance officers to gain visibility into their
organization’s security practices, Lumension Security
solutions deliver policy-based endpoint controls to enforce
compliance with security regulations.
With Lumension security management solutions, compliance
officers can be assured that compliance with security
policies and regulations are consistently and continuously
attained throughout the enterprise. By using a proactive
approach, Lumension Security solutions provide the best
first and last line of defense to effectively manage
endpoint risk.
Best First Line of Defense
Enforcing application and device control policies,
Lumension Security solutions enable only authorized
applications to run and only authorized devices to be
accessible on a network, server, terminal services server,
thin client, laptop or desktop. Furthermore, the
confidentiality and integrity of corporate IP, customer and
financial records is ensured by enabling only authorized
users to copy data to removable media and also enforcing
encryption, with complete auditing of that action.
Best Last Line of Defense
Delivering rapid and automated patch and remediation of
software vulnerabilities and configuration issues, Lumension
Security solutions ensure that endpoints remain in
compliance with industry and regulatory standards. By
establishing and enforcing mandatory baselines,
organizations can shut the door on vulnerabilities before
they can be exploited.
Policy and Regulatory Compliance
Providing detailed and actionable audit information,
Lumension security management solutions enable organizations
to prove policy compliance as well as with certain industry
regulations.
The result is the protection of corporate IP and
compliance with industry and regulatory security and
operational standards.
Lumension Security Management Solutions Enables Compliance Officers to:
- Assure compliance
with regulations
governing security
management, privacy and
internal controls
- Discover assets
through network and
agent-based security
assessments
- Develop endpoint
security policies and
mandatory baselines
- Assess and remediate
vulnerabilities and
configuration issues
- Enforce application
and device use policies
at the endpoint
- Control and monitor
the flow of inbound and
outbound data
- Enforce encryption
of data onto a removable
device
- Audit security
policies through
detailed and actionable
reporting
1 – ESG Survey 2005
|
Security
Management Solutions for Compliance Officers