|
More and more companies and government agencies are now required by law to meet certain compliance regulations or risk financial penalties and or lawsuits by regulators and the public. Maintaining and proving regulatory compliance is a significant burden for every public company, almost every large organization, and specialized smaller ones that serve the public or handle sensitive financial or personal data. The IT security organization is responsible for protecting extremely valuable and critically sensitive information on corporate servers and networks. Government regulators and industry watchdog organizations now specify basic security requirements for IT systems that deal with sensitive information.
Laws such as the Gramm-Leach-Bliley Act (GLBA) protect the security of consumers' personal financial information that is processed and maintained by financial institutions and service organizations. Another law termed the Health Insurance Portability and Accountability Act (HIPAA) protects confidential patient medical and insurance information from improper access in Health Care related organizations. And most any business that wants to accept credit card payments or process credit transactions must comply with the PCI (Payment Card Industry) Data Security Standard. Likewise, the DoD Directive 8100.2 mandates how U.S. military classified data is transmitted, encrypted, and stored.
Fundamental to all of these regulations are the requirements to analyze and manage risks, assess and address vulnerabilities, and monitor for intrusions. Network access, including wireless is a key security issue and is now specifically addressed by requirements in many of these regulations. Network Chemistry's comprehensive suite of security solutions helps organizations understand what is on their network and ensure that only authorized users and devices can connect. Not only is this the first line of defense against misuse and attacks, it is also an essential tool for maintaining and proving security compliance. Besides satisfying many of the regulatory requirements for maintaining network surveillance and assessing vulnerabilities, Network Chemistry solutions also provides detailed compliance reports with pass/fail results and supporting evidence for each of the major regulatory standards.
|
