Symantec Control Compliance Suite

Symantec Control Compliance Suite, Policy Management assists with defining and mapping of policies to best practices, frameworks, and regulations, and identifies overlaps in control objectives to reduce duplicate assessment efforts. Symantec’s Policy Management also automates the distribution of written policies throughout the organization, tracking end-user policy acceptances and exception requests. It collects evidence of compliance to control objectives through integration with other Symantec Control Compliance Suite components that provide both procedural and technical assessments, thus enabling analysis and reporting on compliance efforts. In addition, Policy Management ships with over 125 sample policies and policy templates, and is fully and easily customizable. Newly enhanced reporting and dashboard capabilities allow more flexibility for distributing information.

Symantec Control Compliance Suite, Response Assessment Management automates the assessment of procedural, non-programmatic controls. These non-programmatic controls make up the majority of objectives laid out in regulatory mandates (SOX, HIPAA, FERC), standards (PSI-DSS) and frameworks (ISO, COBIT). Organizations often rely on paper-based assessments that are expensive and difficult to manage. RAM manages the manual assessment process from questionnaire creation and distribution to analysis of response data. RAM is a tightly integrated module within the CCS suite. As a result, CCS provides unique integration of both procedural and technical controls status and reporting, thus ensuring comprehensive policy coverage.

Symantec Control Compliance Suite, IT Controls Management automates the assessment, reporting and the remediation of deviations from technical standards and makes it possible to automate the identification and the remediation workflow for mis-configurations:

• Assessment - Create standards from pre-built content, assess vulnerabilities and configuration drift, agent-less and agent-based data collection.
• Remediation – Out of the box, step-by-step remediation guidance, ticketing integration, and Built-in direct remediation.
• Analyze Results - Publish as evidence of compliance to policies, vulnerabilities, and IT Risk, out-of-the box reports and dashboards