VANGUARD Compliance Manager VANGUARD Policy Manager VANGUARD Security Manager VANGUARD Enforcer

Transcription

1 VANGUARD Compliance Manager VANGUARD Policy Manager VANGUARD Security Manager VANGUARD Enforcer

2 VANGUARD Compliance Manager Customization Compliance Support Performs specific custom baseline checks Performs critical compliance checks to adhere to industry specific regulations Supports RACF and ACF2

3 VANGUARD Compliance Manager Vanguard Compliance Manager performs critical compliance checks that exposes adherence differences to industry specifics and clients custom checks. Delivers immediate results validating data protection results and guidance for corporate protection of risk and compliance. KEY FEATURES: Performs critical compliance checks Performs custom baseline checks Easy-to-Use with immediate results Identifies open compliance gaps and remediate

4 VANGUARD Compliance Manager VCM Baseline Scan Results Gaps Logged Compliance Security Baseline Start Scan Baseline Actions Checks Defined BOA Standards & Requirements Security Servers z/os Unix services Other Baseline Tasks Notifications submitted Gaps distributed for closure Gaps closed for Compliance

5 VANGUARD Security Manager Analyze Productivity Report Automate Provides real-time administration for z/os Security Server and DB2 on Windows desktops and mobile devices Enables automated recurring, timeconsuming task-oriented administration Allows comparing profiles on the same or different database Automatically generates the correct command to accompany each action

6 VANGUARD Security Manager KEY FEATURES: Vanguard Security Manager is an easy -to-use solution for non-technical personnel to administer and report on all z/os Security Servers across the enterprise with a simple to use web-based interface. An easy-to-use web-based interface that enables inexperienced security administrators without knowing Security Server commands. Provides real-time administration with pointand click, across windows compatible desktop and mobile devices. Enables automated recurring, timeconsuming tasks oriented administration. Provides cross systems access & reporting on the same or different databases. Automatically generates the correct commands to accompany each action.

7 VANGUARD Security Manager (VSM) zseries Server z/os RACF Database zseries Server z/vm RACF Database IBM DB2 VSM Users DB2 Database Server (LUW or z/os) VSM Web Server & VSM Services On Microsoft Windows Server

8 VANGUARD Policy Manager Compliance Security Prevention Ensures all RACF commands comply with company policy Provides the most advanced secure password capabilities while proving real-time password management Stops unauthorized users from changing RACF profiles

9 VANGUARD Policy Manager Compliance Enforcement for z/os Security Servers Controls Command Execution Controls Parameter Usage Enforces Parameter Value Locks Down Profiles from Unauthorized Changes Prevents the Unauthorized Creation of Profiles Fails commands that are not compliant with policy Co-exists in-house code Supports pre-defined Best Practice Policies Supports user-defined Policies

10 VANGUARD Policy Manager Administrator COPY HERE RACF Database RULE = POLICY - If they match everything is ok - If they don t Policy Manager will reject it or fix it

11 VANGUARD Enforcer Detect Notify Remediation Continuance Provides continuous monitoring of security controls to detect changes to the system Active Alerts provide immediate notification of security events Corrects any deviations from the baseline Enforcer captures and baselines current security configurations and profiles for future comparison

12 VANGUARD Enforcer Vanguard Enforcer provides continuous monitoring of security controls with an automated process to compare your current z/os Security Server configuration controls against the previously established baseline. Enforcer has options to notify and or automatically correct deviations from the baseline. KEY FEATURES: Vanguard Enforcer detects and corrects changes to the system that would violate security policies. Enforcer s active alerts provides immediate notification of security events or combinations of events. Enforcer captures and baselines current security configurations and profiles for future comparison.

13 VANGUARD Enforcer Enforcer Baseline Enforcer Log Info. Logged Triggers Start Scan Enforcer Sensors Actions Startup Options Manual Time-Interval Critical Settings Critical Resources Notice Urgent Messages Sent Enforcer Log Information Required Commands Automatic Correction

14 Thank You