The Business Challenge
Today’s organizations face a multitude of evolving regulations and best practices that include:

• COBIT (Control Objectives for Information and related Technology)

• FISMA (Federal Information Security Management Act)

• ISO 27002 (17799) (International Standards Organization)

• NIST SP 800-53 (National Institute of Standards and Technology)

• PCI DSS (Payment Card Industry Data Security Standard)

• SOX (Sarbanes Oxley)

Audit teams are tasked with identifying inherent risks, assessing the effectiveness of IT controls and measuring overall compliance across numerous mandates. To effectively address these challenges, tactical deployments of point solutions aimed at meeting single requirements are no longer enough. Forward-looking organizations are taking a more strategic approach and adopting integrated solutions to mitigate long-term risk.

The eIQ Solution
Collecting, correlating and analyzing all data from across the enterprise is fundamental to effective enterprise security and compliance management. eIQ’s SecureVue security, risk and audit management platform offers enterprise security management (ESM) and IT governance, risk and compliance (GRC) to support compliance.

SecureVue Feature	SecureVue ESM	SecureVue IT GRC
End-to-End Data Collection, Correlation & Archival: collects, correlates and stores log, vulnerability, configuration, asset, performance and network behavioral anomaly data for extended periods of time to meet audit requirements
Forensics: allows users to search volumes of archived data to investigate security breaches and ensure regulatory compliance
Compliance Reporting: provides a single report that combines all data to support regulations and best practices
Advanced Reporting: provides streamlined, audit-friendly reports that map data to specific IT controls and identify compliance gaps, extending ESM reporting capabilities
Compliance Library: contains more than 5,000 technical and functional controls that map directly to audit requirements for regulations, best practices and frameworks
Wizard-Based Policy Mapping: enables users to add and modify regulations and best practices to address a broad range of unique business drivers, including internal practices, service level agreements and business partner requirements

Supported  Not Supported

The End Result

• Supports evolving regulations and best practices
  

• Correlates log, vulnerability, configuration, asset, performance and NBA data across the enterprise
  

• Ensures continuous real-time monitoring, correlation and alerting
  

• Centralizes reporting to ease compliance and security management
  

• Provides uncompromised audit trails and tangible evidence of internal controls
  

• Enables forensics and investigative root cause analysis
  

• Presents high-level risk assessment