Home » Auditing » Compliance Evaluator

iSecurity Compliance Evaluator for IBM i

Single-View Compliance Check for IBM i

Compliance siem support as400

The iSecurity Compliance Evaluator provides managers, auditors and systems administrators a quick, network-wide, comprehensive overview of their IBM i server’s compliance level with government, industry and corporate regulations.  It provides concise one-page reports featuring an

overall compliance score, as well as specific ratings for any security-related component of IBM i, such as system values, network attributes and user profiles. The reports also include useful operational information deriving from QAUDJRN and from network activity. The result is a colorful and user-friendly Excel spreadsheet which provides three different views: general, summary, and exceptions only displays.

With Compliance Evaluator, managers, system administrators and auditors can easily produce any number of advanced reports, choose the parameters and structure of the report and give different weights to each parameter. Each report can automatically be e-mailed to the relevant auditor.

iSecurity Compliance Evaluator Key Features

  • Network-wide compliance status at a glance
  • PCI, SOX, HIPPA, GDPR and other compliance checks
  • Results in colorful Excel spreadsheet
  • Results can be emailed directly from IBM i
  • Automatic scheduling
  • Single general score per system and specific scores per topic
  • Each item & topic can receive individual importance
  • All scores displayed as percentages
  • Several report templates, with different levels of detail
  • Unlimited number of reports
  • Detailed or summary data
  • Ready-made & customizable checks
  • User-friendly GUI interface

Imagine that each morning, when you reach the office, a customized compliance information sheet awaits you. With all this information available, you can easily ask your IT Manager to explain particular issues (rather than periodically having the IT manager manually check compliance status).

iSecurity Compliance Evaluator offers managers, auditors and administrators a quick yet comprehensive view, analyzing the compliance of their Power i systems with PCI, SOX, HIPAA and other regulations.

With Compliance Evaluator, managers can easily produce any number of compliance checklists, choose the contents and structure of the result, and attach different weights to each item. Compliance Evaluator can be scheduled to run automatically, and its results can be emailed directly from Power i to the relevant person.

  • Network-wide compliance status at a glance
  • Built-in compliance checks for PCI, SOX, HIPAA etc.
  • Easily defined site-specific compliance checks
  • Color-coded Excel spreadsheet can be emailed directly from Power i
  • Scheduling of periodic compliance checks
  • Single score per system and specific scores per topic
  • Each item & topic allocated individual importance
  • All scores displayed as percentages
  • Several report templates, with different levels of detail
  • Unlimited number of reports
  • Detailed and/or summary data
  • User-friendly GUI

Compliance Evaluator reports provide an overall compliance score, as well as specific ratings for topics comprising the compliance standard being evaluated. Individual topic scores are based upon the relative importance of the items comprising the topic and, of course, the item values. Status checks are provided for items such as System Values, Network Attributes, User Profile Attributes and Object Authorities.

The result is a colorful, user-friendly Excel spreadsheet which provides three different views: general, summary and exception-only displays.

Compliance Evaluator reports are based upon both static system data and time-sensitive data covering actual network transactions. Together, these can highlight unexpected changes in user activity, such as how often users access production or system files. The reports include operational information from QAUDJRN and from actual network activity. Virtually any type of information can be included.

A number of pre-defined compliance checks relating to PCI, SOX, HIPAA and other common security regulations are supplied with the product. Each report can relate to a single server, selected servers or all servers in the enterprise. In addition, Site-specific compliance checks can be defined by users through an advanced Eclipse-based GUI.

The results of queries are automatically saved, and can serve as the basis for historical comparisons of compliance status over time.

Related IBM i Auditing Products

Audit compliance with gdpr

Audit

Read more

Visualizer ibm i audit

Visualizer

Read more

AP Journal hipaa compliance

AP-Journal

Read more

Multi System

Multi System

Read more

Related Resources