Security Configuration Auditing
SecureVue delivers a true unified situational awareness platform that delivers comprehensive security intelligence and provides the real-time information.
Fortunately, the Center for Internet Security (CIS) has established a series of secure configuration benchmarks to provide comprehensive, detailed security controls for enterprise systems. The standards cover an extremely diverse range of systems, and when applied, result in a security-hardened configuration that eliminates common system-related attack vectors.
Poorly configured or mis-configured systems are the “low-hanging fruit” that entices malicious attackers and malware. From weak password settings and incorrect file system access controls, to running applications and services with known vulnerabilities, security professionals spend an inordinate amount of time tracking down and eliminating one-off configurations that can expose an otherwise secure network to major threats. One way security professionals address this issue is by implementing standard, “security hardened” configurations. The Center for Internet Security (CIS) has established a series of secure, system-specific configuration benchmarks that provide comprehensive, detailed security controls. The standards cover an extremely diverse range of systems, and when applied, result in a security-hardened configuration that can eliminate common attack vectors.
EiQ’s SecureVue unified situational awareness platform provides a complete solution for CIS benchmark auditing and compliance reporting across a broad range of asset types, including Windows, UNIX and Linux operating systems, routers, switches, firewalls and other technologies. Through its integrated ComplianceVue component, the SecureVue platform provides an integrated solution for CIS configurations across a wide range of criteria, including patch and operating system details; applications and services, including startup state; system audit settings, such as types of events logged, access permissions to system; access controls; security configurations such as password properties; user rights; and network parameters. SecureVue provides organizations with the most comprehensive CIS benchmark compliance solution available in a single platform.