Symantec Security Enhanced by Workflow - Part II

The Symantec Workflow Business Practice has developed Workflow templates around 4 products in their Security suite; Control Compliance Suite (CCS), Critical Systems Protection (CSP), Data Loss Prevention (DLP), and Symantec Endpoint Protection (SEP). The templates add some proactive business processes around the already great products from Symantec. The templates are available to Symantec clients for free and WEVO can help you get them implemented if you don't have a Symantec Workflow expert on staff.

This week we're focusing on CCS. Below we will be sharing information from Workflowswat.com to describe the features and functionality of the templates. You can also access videos at www.workflowswat.com/process-templates.html.

CCS RMS Security Baseline Template

This template provides a “Best Practice” process for monitoring and remediating changes to Critical Files and AD Groups. This template can also be setup to monitor other critical security items (Database Access, MS Exchange Distribution Lists, File Shares, etc.).

The main features of this template are…

• Workflow integrates with the CCS Risk Management System and starts a Workflow process when an RMS baseline query discovers changes in Active Directory or the File System. A task is created for the compliance group responsible for reviewing the baseline delta. The analyst will have the option to update the baseline with the newly discovered change or remediate the change.
• Audit reporting – Who, What, When. Customers can run process reports by RMS query and Date Range. These reports can be provided to regulators and help avoid many of the challenges that can occur during an audit. Also, these reports add value by providing metrics for continuous process improvement.
• Customers can take the base template and extend it to integrate with other systems as needed.

Stay tuned for the Critical System Protection, Data Loss Prevention, and Symantec EndPoint Protection templates in the coming weeks!