"Security is a top concern organizations have about moving critical business applications to the cloud," said Jon Oltsik, Principal Analyst at the Enterprise Strategy Group. "Even with all the benefits cloud computing provides, CIOs will continue to be wary until there is a way to manage security and compliance with the same level of assurance that is available today with physical data center environments. With today's announcement, EMC has made an important first step in addressing this fundamental concern with security in today's growing virtualized and cloud infrastructures."
Featuring an easy to use dashboard based on the RSA Archer eGRC platform, the solution is designed to give organizations a complete assessment of security and compliance posture across their VMware virtual infrastructure. This allows customers to centrally manage security across both virtual and physical infrastructures using RSA Archer. The dashboard integrates with a library of more than 100 VMware-specific controls such as administrative authentication, that map to the most current global regulations such as PCI-DSS and HIPAA to ensure best practices for deployment. The solution also integrates with the RSA enVision security information and event management platform to provide a more comprehensive assessment of security events from across the enterprise.
"Demonstrating compliance on virtualized platforms has been a labor-intensive and highly complex process, particularly as many of our customers require FISMA compliance," said Chris Day, Chief Security Architect, Terremark Worldwide, a leading global provider of managed IT infrastructure services. "We've given input throughout the design of the RSA solution and fully support their shared vision with partners VMware and Intel. Using the RSA Solution for Cloud Security and Compliance will enhance our ability to assess the security of the virtual infrastructure and help the customers that choose Terremark for their cloud infrastructure respond to compliance audits."
The RSA Solution for Cloud Security and Compliance helps enable organizations to rationalize a multitude of compliance requirements, control frameworks, standards and best practices into a set of centralized security policies that can be applied to virtual infrastructure. Simple dashboards are designed to make it easy to visualize security and compliance posture. Through automated assessments and simple workflows, the solution helps streamline the process of managing tasks between security teams that define policies and IT operations teams responsible for implementing those policies.