Symantec Control Compliance Suite

응답 평가 모듈은 비프로그래밍 방식의 제어 평가를 자동화합니다. 이러한 비프로그래밍 방식 제어는 규정/프레임워크의 목표 대부분에 적용될 수 있습니다. 기업에서는 종종 높은 비용을 초래하고 관리하기 쉽지 않은 문서 기반 평가에 의존합니다. RAM은 설문지 작성 및 배포에서 응답 데이터 분석에 이르는 수동 평가 프로세스를 관리합니다. RAM은 CSS와 통합되어 절차적, 기술적 제어 모두에 대한 포괄적인 뷰를 제공함으로써 정책이 보다 잘 적용될 수 있도록 합니다.

Entitlements module gathers effective permissions on data from across the enterprise, translates those permissions into a consistent human readable format, associates management classification to the data, and electronically route the information to business owners for access approval. Entitlements approval are tracked and tied to analysis/audit reports as controls evidence.

Policy module assists with defining and mapping policies to best practices/ frameworks/ regulations, and identifies overlaps in control objectives to reduce duplicative assessment efforts. Policy module also automates the distribution of written policies throughout the organization, tracking end-user policy acceptances and exception requests. Policy module collects evidence of compliance to control objectives through integration with other CCS components that provide both procedural and technical assessments, thus enabling analysis and reporting on compliance efforts. In addition, Policy Module ships with sample policies and policy templates to jump start a strong governance process.

Standards module automates the management of deviations from technical standards and provides the ability to remediate misconfigurations. Standards Module provides pre-packaged technical standards that granularly define best practices for securing servers and databases and trends compliance to these standards. In addition, the CCS Standards Module provides detailed remediation instructions to correct deviations and integrates with existing change control ticketing systems to ensure that changes are made only after appropriate authorization and with proper oversight.