Routine IT Risk Assessment Appliance

Proactively and automatically test for Information System compliance and security using a single appliance.

Information technology and security professionals are drowning in data regarding IT security and compliance. Resources are limited and devices and applications that are required to protect organizations are difficult to manage without automation. In spite of on-going complexity, an organization must meet serious IT regulatory requirements and fiduciary responsibilities.

Why not use a proven and effective proactive security appliance that has multiple features built within one appliance? The Routine IT Risk Assessment Appliance combines asset database information, policy monitoring, vulnerability information, and compliance surveys to determine if an organization is meeting regulatory and compliance standards.

The Routine IT Risk Assessment Appliance (RAA) gives customers a real-time view of their environment and provides actionable alerts and remediations to the customer to help prioritize resources.

RAA helps organizations by offering:

Provides monthly or quarterly customized and detailed risk, vulnerability
and compliance assessment reports
Simplifies IT security needs with easy to understand language for policy,
remediation, regulations and standards compliance
Offers automated, knowledge-based software that is updated when new
threats with over 15,000 vulnerability assessments carried out across
your network
Helps IT administrators secure their networks faster and more effectively
with ongoing monitoring
Reduces the total cost of ownership by centralizing vulnerability scanning,
patch management and network auditing
Prevents downtime and business losses due to vulnerability exposure
Offered as a third-party audit or can be performed with other managed
services

Features of the Routine IT Risk Assessment Appliance

Live Assessor Review Monthly
Meets all of the requirements as defined in the FFIEC Examination
Handbook for Self Assessments
Comprehensive 12 point network risk assessment includes the following:
- Installed software Inventory
- IT Asset inventory
- Password complexity assessment
- Event Log and Policy Settings audit
- Users and Groups Audit
- Database audits
- Patch and Service Pack Audits
- Ports and Services enumeration and auditing
- File and folder shared permissions audit
- LSA secrets such as service passwords, cached password hashes of recent users, and others
- Protected storage audits