Symantec Control Compliance Suite

Symantec Control Compliance Suite, Policy Management assists with defining and mapping of policies to best practices, frameworks, and regulations, and identifies overlaps in control objectives to reduce duplicate assessment efforts. Symantec’s Policy Management also automates the distribution of written policies throughout the organization, tracking end-user policy acceptances and exception requests. It collects evidence of compliance to control objectives through integration with other Symantec Control Compliance Suite components that provide both procedural and technical assessments, thus enabling analysis and reporting on compliance efforts. In addition, Policy Management ships with over 125 sample policies and policy templates, and is fully and easily customizable. Newly enhanced reporting and dashboard capabilities allow more flexibility for distributing information.

Das Reaktionsprüfmodul automatisiert die Analyse von programmunabhängigen Kontrollen. Diese programmunabhängigen Kontrollen machen den Großteil der Zielvorgaben aus, die in Bestimmungen/Regelwerken festgelegt sind. Unternehmen vertrauen häufig auf manuell aufgezeichnete Analysen, die nicht nur hohe Kosten verursachen, sondern auch schwierig zu verwalten sind. Das Reaktionsprüfmodul verwaltet den gesamten manuellen Analyseprozess – von der Erstellung und Verteilung des Fragebogens bis hin zur Analyse der Reaktionsdaten. Das Reaktionsprüfmodul lässt sich in Control Compliance Suite integrieren, um einen umfassenden Überblick über verfahrensorientierte und technische Kontrollen zu liefern und so die Richtlinienabdeckung sicherzustellen.

Symantec Control Compliance Suite, IT Controls Management automates the assessment, reporting and the remediation of deviations from technical standards and makes it possible to automate the identification and the remediation workflow for mis-configurations:

• Assessment - Create standards from pre-built content, assess vulnerabilities and configuration drift, agent-less and agent-based data collection.
• Remediation – Out of the box, step-by-step remediation guidance, ticketing integration, and Built-in direct remediation.
• Analyze Results - Publish as evidence of compliance to policies, vulnerabilities, and IT Risk, out-of-the box reports and dashboards