- Mythbuster busts his own tale
- 10 open source companies to watch
- Sony recalls 73,000 Vaio laptops
- Tool to evade China's Web censorship
- Chrome and Firefox and add-ons
Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:App Performance | On Demand Security | Networking Solution | SOA | Value of WDS
A slew of start-ups are rolling out tools to help newly compliant IT shops monitor, maintain and enforce compliance policies.
Meeting the demands of the Health Insurance Portability and Accountability Act (HIPAA), the Sarbanes-Oxley (SOX) Act, and the Gramm-Leach-Bliley Act requires constant data analysis, a chore that security management newcomers Elemental Security, eIQNetworks and Procera Networks hope to ease.
"IT managers need to have ongoing visibility into their compliance levels to avoid drifting out of compliance over the course of six months or so," says Scott Crawford, a senior analyst with Enterprise Management Associates. "No one wants to have a big compliance project every year. Security and policy management products can automate parts of the ongoing monitoring and enforcement of compliance policies."
Start-up Elemental Security this week is scheduled to launch its Elemental Compliance System, software that the company says combines policy-creation tools with ongoing monitoring and enforcement features. The software, developed by company co-founder and IT security guru Dan Farmer and Python script author Guido van Rossum, can be customized to work with a variety of platforms and applications.
"It's not a tool specific to one type of vertical application. It can work with what I have without me having to go to my application vendors and get them to rewrite their code for compliance," says Doug Torre, director of networking and technical services at Catholic Health System, an integrated healthcare delivery network in and around Buffalo, N.Y. He is piloting the product to determine if it will help him maintain compliance policies across healthcare-specific applications.
The system uses a combination of server software and agents distributed on servers, desktops and laptops. The server maintains the library of policies, and the agents monitor devices, reporting any changes from the established baseline to ensure compliance.
The product comes with tools to create policies for heterogeneous environments, including Unix and Windows. Templates and scripts let even inexperienced administrators create policies on multiple systems without platform-specific knowledge, the company says.
Once deployed, the software assesses compliance on a regular basis and offers tips to mitigate potential problems, such as discovery of an unauthorized laptop attempting to access a network or a sales employee accessing an accounts payable application.

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...
Vulnerability Management For DummiesDownload this concise book "Vulnerability Management for Dummies," to learn about the simple steps...
The ROI and TCO Benefits of Data Deduplication for Data Protection in the EnterpriseThis paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...
PoE Plus: Impact on the PoE MarketThe standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...
Harnessing the power of communications to increase workplace performanceDue to the convergence of IT and telecommunications technologies, the business workplace has been...

We have so many holes punched in our firewalls today that many industry insiders question the value...
The self-managed networkWe aren't there yet, but advances in network and systems management tools are making it possible to...
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment