Meeting DISA STIGs and RACF CIS
Vanguard Compliance Manager (VCM) performs custom critical compliance checks for both internal and external regulations in regards to industries and clients.
Security and audit teams can efficiently identify potential company-wide compliance violations immediately, perform custom baseline checks and take corrective actions by enforcing company specific security and compliance protocols in harmony with today’s industry standard requirements. In addition, Compliance Manager supports RACF, ACF2, z/Linux, and TSS.
Many of the offerings today require the user/company to accept “out of the box” offerings that may or may not fit exact personality of the organization. Trying to make a square peg fit into a round hole leaves many gaps that could create audit and compliance issues for the organization.
The Vanguard solution requires organizations to leverage Subject Matter Experts, also known as SMEs, that identify specific and unique checks that are deemed important for meeting and exceeding both internal and external requirements.
Upon the completion of the check definition by the SME, the definitions are delivered to the Vanguard Compliance Manager team for refining; which produces unique, client-specific baseline checks. The process of creating unique, specific baselines for the industry segment and personalizing those baselines by organization is the best method for receiving any anticipated ROI for security and compliance investments.
Vanguard Compliance Manager provides an easy-to-use communication layer that delivers immediate results for “C” level intelligence, validating data protection results and guidance for corporate protection and compliance.
Check results and close gaps on all of your organizations workstations, mobile devices and tablets with Vanguard Compliance Manager.
Most CISO and CIO executives demand accessible information delivered in a handheld device, tablet or business workstation. The Vanguard Compliance Manager delivers timely, important information for intelligent decision making to check results and close gaps before they become expensive issues.
Vanguard Aggregation and Delivery (VAD) provides software and configuration delivery changes from a centralized site. It also offers administrators and users of the Vanguard Governance, Risk Management, and Compliance (GRC) Suite combined with the VCM solution the ability to pull aggregated results.
With the introduction of VAD, it is now possible to access and process the results of VCM analyses being performed throughout an enterprise from a single centralized site. This is done in a way that does not potentially violate regional laws and regulations that govern the flow of personal and sensitive information across borders of jurisdiction.
CIS for regulatory compliance now available with Vanguard Compliance Manager for RACF
The CIS guidelines are closely aligned with multiple security and data privacy regulatory frameworks. This includes but is not limited to, the National Institute of Standards and Technology (NIST), Payment Card Industry Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), and ISO/EIC 2700.
By adhering to CIS benchmarks and the NIST hardening standards, any organization operating in an industry governed by these regulations can make significant progress toward compliance. In addition, CIS Controls and CIS Hardened Images can help support an organization’s compliance with the EU’s General Data Protection Regulation (GDPR).
CIS guidelines offer: