Compliance

Virtually every regulation, standard or best practice related to the discipline of information security mandates that organizations must control their end points, regardless of whether those assets are servers, workstations, laptops, tablets or other devices. PCI DSS, HIPAA, FISMA, SOX frameworks, and both ISO27001 and COBIT insist that enterprises have not only a complete, accurate and up-to-date inventory of end points, but also require that they maintain control of programs, devices and data associated with them.

Know your security compliance posture in seconds

Historically, end point compliance management solutions have been expensive, time consuming and – far too often – ineffective for organizations that need to meet critical mandates and standards related to information security. From bulky, agent-based solutions that place a substantial load on end points and require constant maintenance, to deploying a patchwork managed solutions that each only support one or two types of end points, the options for gaining complete, enterprise-wide visibility of end points have caused far too many organizations to give up on this critical security and IT operations function.

Continuous Compliance

BlackHatWing can ensure compliance of your endpoints thru continuous monitoring of your environments adherence to a golden image or standard configuration. This golden image can be quickly defined by pointing to a real system or created custom by you. BlackHatWing can leverage known standards such as NIST and CIS policy definitions and supports PCI-DSS, HIPAA, SOX, FISMA, GLBA and other regulations.

With BlackHatWing, you can easily determine deviations to:

> Whitelist application policy – defined which applications are appropriate and which are not allowed
> Blacklist policy – defined and automated control over shadow IT from installing compliance violating apps
> Startup and system policy definition control
> Group policy and local policy control
> USB policy
> Security Policies and user account control
> File Integrity Monitoring of critical system files
> Verified registry integrity
> OS and application patch version control
> Complete 3rd party endpoint configuration and security agent control
> Any custom definition using file, process, registry or WMI/script
> With enhanced visibility and control, BlackHatWing also enables exclusions to policies based on IP basis.

Audit, Assurance and Implementation

Business Continuity Planning and Disaster Recovery Planning are the vital activities for any critical business operation. No way any thriving business can afford disruptions or disasters. Imagine, what happens with the failure of Information Systems supporting operations in Banks, Call Centers, IT Companies, Internet Service Providers, Broadcasting Agencies, Government, Hospitals or Services Industry ? Severe financial losses, disrupted activities, lost data, discontinued services, unsatisfied clients, disappointed users, damaged repute and the list goes on.

BlackHatWing consultants have proven expertise in Data Loss Prevention solution consultancy, enterprise wide deployment and assistance. We provide assistance in creating an effective enterprise wide DLP program. We pride ourselves in providing a vendor neutral point of view in understanding and selecting a suitable DLP solution addressing your business, operational and IT requirements as well as your financial constraints.

The apparent benefits derived from audit assurance services include: