The Vblock GRC Solution with RSA provides a centralized framework that manages security policy and compliance across the virtualization layer of the Vblock platform. The solution delivers more than 130 VMware-specific policies and implementation procedures mapped to hundreds of global regulations such as PCI, HIPAA, JSOX and EU privacy regulations. It also discovers new virtual infrastructure devices and measures relevant security control procedures, continuously monitoring that those controls have been implemented correctly. It enables an IT organization to have centralized visibility and control into their compliance posture across physical and virtual infrastructures.
The Vblock GRC Solution with RSA follows VCE’s four-phased approach:
• Architect – Aligns and prioritizes business requirements with centrally documented policies, standards and procedures by which the Vblock platform will be governed
• Implement – Configures the solution to discover VMware devices and check controls with automated measurement and questionnaires
• Validate – Regularly monitors the VMware-based controls and manages non-compliance through remediation or exception management processes
• Govern – Uses the dashboard and reporting features to provide transparency on the security policy and compliance posture of the Vblock platform
“To best anticipate, analyze, assess and remediate a security concern, it’s critical to identify risks within a business context,” said Todd Pavone, EVP Products and Solutions, VCE. “The Vblock GRC Solution with RSA makes it easy to implement business regulations and processes through comprehensive and specific security policies and features purpose built for virtual environments.”
“Heightened regulations and more complex threats, combined with a lack of a centralized policy and compliance capability often hold enterprises back from deploying virtualized environments,” said Alex Bender, Director, eGRC Programs and Strategy, RSA, The Security Division of EMC. “The Vblock GRC Solution with RSA provides an automated way to manage policies, procedures and compliance initiatives across the IT infrastructure. This foundational approach allows organizations to tie IT into the broader enterprise GRC strategy to help manage risk and demonstrate compliance.”
VCE, the Virtual Computing Environment Company formed by Cisco and EMC with investments from
VMware and Intel, accelerates the adoption of converged infrastructure and cloud-based computing models that dramatically reduce the cost of IT while improving time to market for our customers. VCE, through the Vblock platform, delivers the industry's first completely integrated IT offering with end-to-end vendor accountability. VCE's prepackaged solutions are available through an extensive partner network, and cover horizontal applications, vertical industry offerings, and application development environments, allowing customers to focus on business innovation instead of integrating, validating and managing IT infrastructure. For more information, go to www.vce.com.
VMware, VMware vSphere, VMware vCenter and VMware View are registered trademarks and/or trademarks of VMware, Inc. in the United States and/or other jurisdictions.