简化企业IT合规审计—RSA enVision帮您降低企业内部控制成本，提升安全.ppt

总在不断变化的合规环境 基于框架的安全（Framework-Based Security）消除您安全管理中的漏缝 基于框架的安全信息风险管理实现 适用于合规的内控安全框架流程 根据合规要求，确定IT内控范围 根据内控范围进行资产盘点和风险评估 执行内部IT审计 内控审计报告 基于框架的合规流程 RSA EMC Solutions RSA enVision——3合1的信息事件管理平台 3 in 1日志管理平台——提高安全Support the 3 key aspects of Security Operations Compliance Packages RSA enVision内置提供了以下10大类的合规审计报表模板: BASEL II?- International Convergence of Capital Measurement and Capital Standards Bill 198 Federal Information Security Management Act (FISMA) Gramm-Leach-Billey Act (GLBA) Health Insurance Portability and Accountability Act (HIPAA) ISO 27002 NERC National Industrial Security Program Operating Manual (NISPOM) Payment Card Industry (PCI) Data Security Standard Statement on Auditing Standards No. 70 (SAS 70) Sarbanes-Oxley Act (SOX) RSA enVision——3合1的日志管理平台 With enVision, IT operations analysts can use log data to look for anomalies and the root cause of non-security related problems. This could include system failures, configuration changes, system shutdowns, and service restarts. Shown here is a Dashboard of Activity by Category within Storage Type. So for the EMC Celerra, you can see actions such as system shutdown or reboots to monitor the activity. Customer example: Devon Energy collects logs from their air conditioning system.? They?had a?cooling malfunction that fried 2 petabytes of storage.??The IT team decided to leverage the UDS capabilities of enVision to start firing alerts if the temperature went above 90 in their?datacenter. In order to address the two key challenges that security and their supporting IT organizations are dealing with today (1. growth of enterprise silos, 2. dramatic growth of security information) organizations need an enterprise PLATFORM for compliance, security, and IT network operations, that will eliminate the redundant management problems associated with silos and which will manage growing volumes of data while efficiently and securely minimizing the cost of storing it. That platform is the RSA enVi