Symantec Control Compliance Suite

New or Enhanced Capabilities

• IT Business Alignment – Features policy risk scoring, a new asset-centric approach , significant enhancements to workflow, and very powerful out-of-the box executive reporting.
  
  
• Ease of IT Audit – Provides the most comprehensive evidence collection capability, industry leading integrated technical controls, procedural controls, and entitlements evidence collection. Control Compliance Suite has enhanced capabilities to collect and report on effective permissions, and provides robust evidence attachment capabilities to our response assessment questionnaires.
  
  
• Integrated, Open Platform – Provides the best of all worlds when it comes to data collection. Control Compliance Suite is the convergence of multiple technologies providing the option of using agent-less or agent based architecture, all flowing into a single integrated architecture and data repository. Control Compliance Suite has significantly enhanced and simplified third- party tools and business process integration.

Product Features

Policy Management

• New policy creation wizard
• New mapping interface
• Enhanced integration
• Exception management
• Asset system
• Policy risk rating
• Enhanced reports and dashboards

Standards – Technical IT Controls Assessment

• Standards-based data collection
• Composite standards
• Enhanced IT controls check-builder
• Extended platform support

Entitlements Reporting and Approval Workflow

• Entitlement management for databases (Oracle and SQL Server)
• Entitlement change reporting
• Enhanced reporting
• Exception management support for second-level approval

Response Assessment – Procedural Controls and IT Risk Assessments

• Associate surveys to respondents and assets
• Attach evidence to survey response
• Integration with Control Compliance Suite Asset system quizzing
• Set threshold values, retries, score responses

Security Information Manager

• Compliance and audit reporting
• Log retention and retrieval
• Real-time threat analysis
• Automated incident prioritization
• Incident remediation workflow
• Align security and compliance requirements with IT operations
• Provide appropriate security service levels to different business units and geographies