Symantec Control Compliance Suite

Symantec Control Compliance Suite, Policy Management assists with defining and mapping of policies to best practices, frameworks, and regulations, and identifies overlaps in control objectives to reduce duplicate assessment efforts. Symantec’s Policy Management also automates the distribution of written policies throughout the organization, tracking end-user policy acceptances and exception requests. It collects evidence of compliance to control objectives through integration with other Symantec Control Compliance Suite components that provide both procedural and technical assessments, thus enabling analysis and reporting on compliance efforts. In addition, Policy Management ships with over 125 sample policies and policy templates, and is fully and easily customizable. Newly enhanced reporting and dashboard capabilities allow more flexibility for distributing information.

Le module Evaluation des réponses automatise l'évaluation des contrôles sans programmation. Ces contrôles sans programmation sont utilisés pour répondre à la plupart des objectifs des formulaires ou cadres réglementaires. Les entreprises utilisent souvent des évaluations sur papier onéreuses et difficiles à gérer. RAM gère le processus d'évaluation manuel depuis la création et la distribution du questionnaire, jusqu'à l'analyse des réponses. RAM s'intègre à CCS pour offrir une vue complète des contrôles techniques et procéduraux pour assurer la conformité à l'ensemble des politiques.

Symantec Control Compliance Suite, IT Controls Management automates the assessment, reporting and the remediation of deviations from technical standards and makes it possible to automate the identification and the remediation workflow for mis-configurations:

• Assessment - Create standards from pre-built content, assess vulnerabilities and configuration drift, agent-less and agent-based data collection.
• Remediation – Out of the box, step-by-step remediation guidance, ticketing integration, and Built-in direct remediation.
• Analyze Results - Publish as evidence of compliance to policies, vulnerabilities, and IT Risk, out-of-the box reports and dashboards