Wednesday, February 16, 2011

Symantec Security Enhanced by Workflow - Part IV

The Symantec Workflow Business Practice has developed Workflow templates around 4 products in their Security suite; Control Compliance Suite (CCS), Critical Systems Protection (CSP), Data Loss Prevention (DLP), and Symantec Endpoint Protection (SEP). The templates add some proactive business processes around the already great products from Symantec. The templates are available to Symantec clients for free and WEVO can help you get them implemented if you don't have a Symantec Workflow expert on staff.

This week we're focusing on Data Loss Prevention. Below we will be sharing information from Workflowswat.com to describe the features and functionality of the template. You can also access videos at www.workflowswat.com/process-templates.html.

DLP Scan Remediation Template

This template provides a “Best Practice” process to assist customers with managing DLP “Data At Rest” Network and Endpoint scan results. The substantial benefit this process provides is the moving of the work from a centralized DLP admin group out into the Business Units. By distributing the work, the amount of time it takes to get an environment compliant will be significantly reduced.

The main features of this template are…

  • Workflow automatically aggregates scan results by file owner. Workflow will send a link to an end user that will display a console with all of the files they own that are in breach of a DLP policy. This end user interface will allow the user to select files and take one of the three following actions…
  1. Delete the file
  2. Encrypt the file
  3. Quarantine the file

  • Audit reporting – Who, What, When. Customers can run process reports by DLP Policy, File Owner, and Date Range. These reports can be provided to regulators and help avoid many of the challenges that can occur during an audit. Also, these reports add value by providing metrics for continuous process improvement.
  • Customers can take the base template and extend it to integrate with other systems as needed.
Next will the be last part of the Symantec Security Enhanced by Workflow series as we focus on the Symantec Endpoint Protection (SEP) template.

No comments:

Post a Comment