IBM provides comprehensive security compliance solutions to assist enterprises in addressing the complexities and growing costs of IT security risk management and compliance. This involves identifying and prioritising the strategic objectives and managing the business across people, processes, information and technology to realise those objectives. These solutions represent capabilities that support the entire lifecycle in assessing, planning, implementing, monitoring and maintaining enterprise compliance.
IBM's security compliance solutions offer comprehensive capabilities for:
- Assessment, analysis and risk management
- Identifying and prioritising strategic objectives
- Automating security compliance policy with internal controls
- Monitoring and reporting for regulatory compliance
Security compliance support covers a wide range of industry and governmental regulations and standards including PCI, FISMA, Basel II, SOX, HIPAA and ISO 27001.
Featured security compliance products
Tivoli Security Information and Event Manager
Centralizes security information and event and compliance policy management providing visibility to the enterprise-wide security posture. It includes centralized log management, event correlation, a policy compliance dashboard and comprehensive reporting capabilities.
Tivoli Security Policy Manager
Delivers next generation, standards-based security management to help reduce complexity and cost of securing access to applications and web services in heterogeneous IT and SOA environments.
Helps IT organizations better manage the encryption key lifecycle by allowing them to simplify, centralize, automate and strengthen key management processes across the computing environment.
Tivoli Security Compliance Manager
Protects businesses against vulnerable and out-dated software configurations by identifying security vulnerabilities and security policy violations for small, medium and large businesses.
Related security compliance offerings
Provides automated Web application scanning and testing for common vulnerabilities including WASC threat classification – such as SQL-injection, cross-site scripting, cross-site request forgery and buffer overflow – and intelligent fix recommendations to ease remediation.
Is a leading automated online compliance solution to assess quality, privacy, and accessibility compliance issues across corporate Web properties.
