Meeting DISA STIGs and RACF CIS
compliance requirements
Contact us at 702.794.0014 ext. 320 or biz.dev@go2vanguard.com to learn more.
Vanguard Compliance Manager (VCM) performs custom critical compliance checks for both internal and external regulations in regards to industries and clients.
What it does:
Security and audit teams can efficiently identify potential company-wide compliance violations immediately, perform custom baseline checks and take corrective actions by enforcing company specific security and compliance protocols in harmony with today’s industry standard requirements. In addition, Compliance Manager supports RACF, ACF2, z/Linux, and TSS.
Many of the offerings today require the user/company to accept “out of the box” offerings that may or may not fit exact personality of the organization. Trying to make a square peg fit into a round hole leaves many gaps that could create audit and compliance issues for the organization.
The Vanguard solution requires organizations to leverage Subject Matter Experts, also known as SMEs, that identify specific and unique checks that are deemed important for meeting and exceeding both internal and external requirements.
How it works:
Upon the completion of the check definition by the SME, the definitions are delivered to the Vanguard Compliance Manager team for refining; which produces unique, client-specific baseline checks. The process of creating unique, specific baselines for the industry segment and personalizing those baselines by organization is the best method for receiving any anticipated ROI for security and compliance investments.
Vanguard Compliance Manager provides an easy-to-use communication layer that delivers immediate results for “C” level intelligence, validating data protection results and guidance for corporate protection and compliance.
Check results and close gaps on all of your organizations workstations, mobile devices and tablets with Vanguard Compliance Manager.
Most CISO and CIO executives demand accessible information delivered in a handheld device, tablet or business workstation. The Vanguard Compliance Manager delivers timely, important information for intelligent decision making to check results and close gaps before they become expensive issues.
Vanguard Aggregation and Delivery (VAD)
Vanguard Aggregation and Delivery (VAD) provides software and configuration delivery changes from a centralized site. It also offers administrators and users of the Vanguard Governance, Risk Management, and Compliance (GRC) Suite combined with the VCM solution the ability to pull aggregated results.
With the introduction of VAD, it is now possible to access and process the results of VCM analyses being performed throughout an enterprise from a single centralized site. This is done in a way that does not potentially violate regional laws and regulations that govern the flow of personal and sensitive information across borders of jurisdiction.
Features:
- Reports security vulnerabilities for remediation
- Customizable baselines available. Over 1,500 different compliance checks available
- Includes support for RACF, ACF2, & TSS
- Adherence to SRR requirements for IBM z/OS categories; supports NIST STIGs & CIS
- Automated SIEM integration for off-platform reporting
- Aggregates baseline results from a single and/ or multiple z/OS LPAR(s) using VAD
- Satisfies specific requirements of: PCI DSS 4.0, DORA, SOX, GLBA, and others
Center for Internet Standards
CIS for regulatory compliance now available with Vanguard Compliance Manager for RACF
The CIS guidelines are closely aligned with multiple security and data privacy regulatory frameworks. This includes but is not limited to, the National Institute of Standards and Technology (NIST), Payment Card Industry Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), and ISO/IEC 2700.
By adhering to CIS benchmarks and the NIST hardening standards, any organization operating in an industry governed by these regulations can make significant progress toward compliance. In addition, CIS Controls and CIS Hardened Images can help support an organization’s compliance with the EU’s General Data Protection Regulation (GDPR).
Benefits
CIS guidelines offer:
- The collected expertise of a global community of IT and cybersecurity professionals.
- Regularly updated, step-by-step guidance for securing every area of the IT infrastructure.
- Compliance management consistency.
- Easy-to-deploy configurations for improved operational efficiency and sustainability.
Downloads
Directions to Access Splunk/Vanguard Demo Apps:
- Go to https://www.splunk.com
- In the navigation bar, hover or click on Resources tab.
- In the far right column, click on Splunkbase.
- In the search bar (center of page), type “Vanguard”.
- Choose either Vanguard Compliance Manager for Splunk” or “Vanguard Active Alerts for Splunk“.
- Click “Login to Download”.