IT Regulatory and Corporate Compliance

Overview:

Key Benefits

• Rapid,flexible policy definition—Choose relevant policies with predefined templates for such regulations as PCI, HIPAA, GLBA, and SOX, or auto-import industry benchmarks; adapt these rules or create your own to support your interpretations of regulations
• Complete coverage, integrated results—Streamline audits with a combination of agent and agentless technology that scans all of your systems and consolidates findings in a single reporting system
• International framework support—Adopt a broader and more formal approach to risk by assessing and mapping your controls against the best practices in such frameworks as ISO 17799 / 27002 and COBIT
• Standards support—Use McAfee support for open content protocols, including SCAP, XCCDF, and OVAL, to import authoritative policy definitions and integrate audit tools into your existing infrastructure
• Proactive compliance reporting—Define, measure, and report on the compliance of information systems based on industry, regulatory, and corporate security policies, as well as standards and frameworks
• Automated protection updates—Protect your information from new vulnerabilities and emerging threats that could affect your compliance with automatic updates from McAfee Avert® Labs

Products and Services:

Products

McAfee Network Access Control—Assure compliance of managed systems by enforcing security and compliance policies with this agent-based endpoint solution

McAfee Policy Auditor—Use this host-based software solution to detect policy violations and vulnerabilities and report on compliance; built from the ground up to automate internal and external IT audits

McAfee Remediation Manager—Enforce compliance using automated or on-demand remediation of noncompliant or vulnerable systems

McAfee Risk and Compliance Manager—Consolidate vulnerability, configuration, and threat data to accurately analyze risk; map the results to security policies and streamline reporting; save time while improving visibility

McAfee Total Protection for Compliance—Integrate host and network scans to assess every system for patches and policy compliance automatically

McAfee Total Protection for Data—Employ strong encryption, data loss prevention, authentication, and policy-driven security controls to safeguard your critical information

McAfee Vulnerability Manager—Protect your most critical assets first by prioritizing IT actions based on risks and policy violations; this agentless solution helps you protect even unmanaged assets

Hosted Services

McAfee PCI Certification Service—Speed compliance with our automated online service, including quarterly scanning, remediation assistance, technical support, self-assessment, and a certificate of compliance

McAfee Foundstone® Professional Services

Regulatory and Compliance Check
Quickly determine gaps in your information security compliance status through customized analysis of relevant requirements, such as HIPAA, ISO 17799, GLBA, and SB 1386

Identity Theft Red Flags Rule Service
Establish and document a prevention program that protects account information as mandated by the Fair and Accurate Credit Transactions Act (FACTA)

PCI Security Audit
Leverage our status as a certified QSA and ASV for a measured approach to compliance that helps you understand and prioritize your information risks