 |
Compliance issues are intimately linked to the notion of traceability. Arising from industry, this notion was then rapidly applied to Information systems. To contribute to compliance, traceability must conform to a three-fold requirement: existence of the trace, implementation of a collection mechanism and presence of an analytical structure.
The current standards (ISO 27001, Bâle II, SOX) require that a history of successive rights granted to users be kept. The recording of administration sessions thus becomes the natural approach for conforming to these standards. Wallix AdminBastion is currently the unique global solution enabling the implementation of a risk prevention systembased on administration action traceability.
|
|
A COMPLETE EVIDENCE TOOL
This system goes well beyond the data provided by log files. Indeed, unless a centralized log collection system has been implemented, the log files can only be viewed on their original device and are furthermore accessible to the administrator working on this equipment it is very easy to modify, or even to delete them! and finally, log files are frequently limited to describing the incident that occurred, without providing any details concerning its cause.
By recording the administration session, WAB ensures that the administrator whose work has been recorded can neither modify, or delete this record. The WAB administrator only gets acces to recorded tracks. Furthermore, by providing a complete trace of the dialogue between the administrator and the equipment, WAB provides an understanding of the cause of the incident, enabling the command or click that caused the problem to be identified. THE ESSENTIAL SOLUTION FOR ALL COMPLIANCE APPROACHES
This is why many companies opt for the WAB solution when implementing information system security plans, required by the increasing demand for compliance.
Contact us |
