Tool cuts through complex information security control regulations with tailored framework for ongoing compliance
London— RSA Security Inc. (NASDAQ: RSAS) today announced the introduction of the RSA Security Compliance Scorecard, an interactive tool designed to identify regulatory information security requirements for businesses. The aim of the Compliance Scorecard is to provide a tailored best practice framework to ensure ongoing compliance for identity and access management and information security.
RSA Security has produced the Compliance Scorecard to help organisations unravel the multiple frameworks and regulations impacting their business. It is also helps to identify specific information security measures to address high-level ‘reasonable and appropriate’ regulatory requirements for data protection and security.
Most organisations face compliance with multiple regulations, and many regulations share common fundamental security requirements including verifying identities, allowing only authorised access to information and providing reliable audit reports. Alongside the Compliance Scorecard, RSA Security’s Best Practice Framework helps to identify the common requirements across all regulations impacting the business in order to rationalise individual compliance requirements, and suggest a workable framework which delivers lowest cost compliance, manages risk and effectively protects information and identities.
Jeff Loeb, director of product marketing at RSA Security, said: “Determining specific regulatory requirements for data protection and information security can be one of the most complex elements of compliance. Our Compliance Scorecard and Best Practice Framework are designed to simplify information security compliance and deliver a strategy which is tailored to the organisation, its business objectives, industry standards and environment. This approach should ensure that information security regulations are comprehensively met on an ongoing basis, at the lowest cost to the business and in a way that makes compliance a source of competitive advantage for the organisation.”
The RSA Best Practices Framework consists of more than 60 best practice processes derived from the key identity and access management related controls from COBIT, NIST 800-53, ISO 17799, FFIEC control frameworks and standards.
RSA Security’s best practice framework contains information security controls in the following five categories:
- Risk management
- Authentication
- Access control
- Data protection
- Logging and reporting
The RSA Security Best Practice framework offers a starting point for organisations wishing to establish a set of best practice information security standards which comply with regulations and are workable within their own organisational environment.
Organisations may find the framework easily maps to and validates their existing framework for compliance; most will find it a valuable ‘checklist’ for compliance and a helpful reference tool for implementing controls and identifying competency gaps.
Availability
An overview of the RSA Security Compliance Scorecard is available online at <http://www.rsasecurity.com/node.asp?id=2895> .
The RSA Security Compliance Scorecard is a free-of-charge service for businesses wanting to assess their existing level of compliance with information security regulations and identify their optimum best practice framework.
