SIMCommander - We Manage Internet Security

SIMCommander Compliance Portal Overview

SIMCommander Compliance Portal (SCP) is a web portal for enhancing the capabilities of Symantec Enterprise Security Manager (ESM) on reporting, change & control, vulnerability tracking, auditing and policy compliance. SCP allows security administrators to customize or create reports based on ESM data which has been complied with internal and external policies. SCP also allows security administrators to set privileges for different users to access various reports and data.

SCP enhances the information access control for ESM. The information access decisions can be based on the individual's roles and responsibilities within the organization or a group of users. This process of defining roles can control users on analyzing which system and information can be reviewed or generated report. And this is usually linked to the organization’s security policy and any relevant regulations. For instance, Windows administrators can generate vulnerability reports on Widows Server Group or individual Windows Server only, while Unix administrators can only view Unix server reports.

Policy Compliance Tracking

SCP provides a Vulnerability Tracking Dashboard that allows administrators easy to understand the policy compliance status of each business asset such as how much new vulnerability found, how many have been fixed, and how many are still pending on the specific server. Based on the policy compliance tracking capability, security manager can easily to assign responsibilities to system administrators on system vulnerabilities and facilitate information sharing among different users. The dashboard provides a fast and easy filtering feature for customers to query vulnerabilities based on severity, status or individual server by just a simple click.

Enhance ESM Reporting Capabilities

SCP provides more advanced reports templates for different audiences such as:

Auditing Reports - report on which server vulnerability has been fixed this month
Management Reports – Top 10 Vulnerability Assets, Remediation Report
Technical Reports – with overall vulnerability listing
Policy Compliance Reports – a report for policy compliance tacking
Departmental Reports – generated reports by server group or individual server with vulnerability listing
Comparison Reports – comparison between two vulnerability scanned results, which allow security administrator to verify whether the vulnerabilities found earlier have been fixed, and at the same time to identify new vulnerabilities.

Centralized Data Storage

SCP combines two or more ESM Managers’ data into a single database for centralized data storage. This allows administrators to generate the overall reports across multiple ESM Managers for centralized management.