|
BOARD
OF DIRECTORS, CEOs and CFOs MUST COMPLY
Compliance with regulations includes protection of electronic
data against breaches in confidentiality, integrity
and availability.
Jail
time, heavy fines and other legal actions may be the
consequences you face if found out of compliance or
a breach occurs on your watch.
NetClarity
helps you document two critical components used as a
litmus test for compliance - steps of due care and due
diligence.
You
will never be 100% secure but if you document your activities
towards improvement of your security posture, you will
dramatically reduce these risks. With the NetClarity
Auditor Enterprise appliance you will be able to:
- Detect
risks to your business by finding and auditing all
of your network assets
-
Deter employees from violating best practices in corporate
security and auditors from finding holes before you
do.
-
Defend against malicious insiders or external exploiters
(hackers, viruses, worms, spyware, etc.) from causing
a breach, downtime or data theft.
Document best practices showing steps of due care and
due diligence.
Auditor
Enterprise comes with built-in tools for creating these
best practice policies and producing your own self-assessment
gap analysis against most important regulations with
workflow and remediation instructions.
Self-assessment
is faster, easier and less expensive.
REGULATIONS
REQUIRING I.T. AUDITS
Government
- EO13231 and FISMA requires that federal agencies establish
risk-based information security programs to secure federal
information. DoD and NIST formally recommend frequent
CVE® audits.
Financial
Institutions - GLBA, E-sign and Bank Secrecy
Act requires IT controls to maintain the confidentiality
and privacy of consumer financial information.
Retail
and e-Commerce - The VISA PCI and MasterCard
SDP standards require proof of due care in the protection
of customer information.
California
Commerce - CA 1798.82 requires all organizations
doing business in California to report publicly, any
cybersecurity breaches that may have compromised customer
information.
Public
Companies - Sarbanes-Oxley requires integrity
of annual financial reports which are usually stored
on systems that are prone to attack, data theft and
data mangling.
Internationally
- The ISO17799® model is the international standard
for best practices in due care and due diligence for
network security and governance.
|
