Security, Audit and Compliance for Specific Business Applications and Regulations
Imperva ADC Insight Services enable organizations to streamline the compliance process and meet regulatory requirements on their application infrastructure without in-depth knowledge of the applications or mandates. ADC Insights instantly configure SecureSphere to monitor and protect SAP ERP and Oracle E-Business applications, and meet the Sarbanes Oxley, HIPAA and the PCI Standard IT requirements. The Services provide continuously updated configuration packages that tailor SecureSphere for the compliance, audit, and security needs of specific business applications and regulations. Multiple ADC Insights can be applied and at the same time to achieve extremely focused application security and compliance.
ADC Insights Content and Packages
ADC Insights bundle all the intelligence needed to automate the IT regulatory compliance and data protection process, and reduce the time to value. Individual ADC Insights combine automated database assessments, configuration settings, policies, and packaged reports for a given application or standard. ADC Insights include:
- Data Structure Knowledge – pre-packaged definitions that cover where data is stored, which data is sensitive, and what constitutes normal usage.
- Targeted Assessment – automated assessments for applications, databases, and operating systems for potential compliance deficiencies and security risks.
- Best Practice Policies and Audit Controls – rules and policies specific to the targeted business issue. For example, enforce access control policies in an Oracle EBS application to provide separation of duties for SOX.
- Pre-built Reporting – reports that clearly identify risks and measure IT compliance against regulations and/or security policy.
- Automatic Updates – ADC Insights are continuously and automatically updated with new auditing knowledge from the Imperva ADC.
ADC Insights currently available are:
- Oracle EBS Insights
- SAP Insights
- SOX (Sarbanes Oxley) Insights
- PCI (Payment Card Industry) Insights
Imperva remains the only vendor that can credibly offer an integrated "vertical" stack spanning the web server, database and web service tiers. The company's continued emphasis on multitier protection, event correlation and automated baselining gives it a strong vertical integration play.
Andrew Jacquith, The Yankee Group