Assert compliance across multiple authority documents simultaneously

Eliminate redundancies by eliminating overlapping requirements and documents

Drill down for comprehensive explanations and sources for each common control

"Key to simplifying compliance management and reducing costs is leveraging the appropriate tools and technologies," said Brandon Dunlap, Managing Director of Research at Brightfly.

"The Unified Compliance Framework allows security professionals to easily address hundreds of regulations by harmonizing a set of controls against which all regulatory standards and best practices are mapped. By adopting the UCF, compliance related technology vendors are providing a real value-add to their customers: to implement a single set of controls and comply with many different industry regulations and standards while reducing significant costs related to compliance with mandates such as PCI-DSS (Payment Card), Sarbanes Oxley, CobiT, NIST and many others."

Director of Solution Marketing at Lumension Jeff Hughes commented: "As regulations and technology practices have mounted over the years, organizations continue to struggle to keep ahead of the latest requirements. Adding to the compliance chaos is the onslaught of new mandates that are introducing new standards, requirements, processes, controls, and guidelines. Enterprises need a way to link security activities with compliance mandates in order to fill gaps and provide visibility for auditors. Through the UCF, our customers can achieve a more cost effective, streamlined plan, reduce complexity and cut costs of compliance and audit by rationalizing their IT controls through a single framework for a cohesive look into the organization's compliance and risk posture."

"Further, the UCF allows our customers to enhance their compliance and risk management efforts to manage critical risk and comply with multiple industry and global regulations under a single umbrella. I believe it's a great way to provide value-add for our customers by further simplifying regulatory mandates and bringing sanity to the world of compliance chaos."

The UCF includes controls from a variety of regulations and guidelines, including Sarbanes-Oxley (SOX), Basel Data Security Standard (PCI DSS), NASD Manual, HIPAA, FERC Security Program, Uniform Electronic Transactions Act, IRS Revenue Procedure and Federal Rules of Civil Procedure.

"The only way to take full advantage of the UCF is to leverage our common controls in a solution which incorporates the UCF," said Craig Isaacs, CEO of Network Frontiers. "Lumension Risk Manager leverages the UCF to ensure enterprises can get a broad and deep view of their security and regulatory profile, automatically identify key concerns, and remediate risk effectively and efficiently within the context of standardized compliance regulations and controls."

Links to Lumension's Multimedia

Optimal Security Blog: Naked Truth about Compliance and Risk Management: Bottom Up vs. Top Down Approach

Optimal Security Videocast on Compliance and Risk Management

Whitepaper: Five Ways to Reduce Your Audit Tax Lumension is currently finalizing the integration of the UCF database and it will be made available to all Lumension customers currently utilizing Compliance and Risk Management solutions.

About Lumension Security, Inc. Lumension Security, Inc., a global leader in operational endpoint security, develops, integrates and markets security software solutions that help businesses protect their vital information and manage critical risk across network and endpoint assets. Lumension enables more than 5,100 customers worldwide to achieve optimal security and IT success by delivering a proven and award-winning solution portfolio that includes Vulnerability Management, Endpoint Protection, Data Protection, and Reporting and Compliance offerings. Lumension is known for providing world-class customer support and services 24x7, 365 days a year. Headquartered in Scottsdale, Arizona, Lumension has operations worldwide, including Virginia, Utah, Florida, Luxembourg, the United Kingdom, Spain, Australia, India, Hong Kong and Singapore. Lumension: IT Secured. Success Optimized.' More information can be found at www.lumension.com. About Network Frontiers Since 1992, Network Frontiers has developed ground-breaking tools to support IT best practices with a special focus on regulatory compliance, metrics, systems continuity and governance. The Unified Compliance Framework (UCF) is Network Frontiers' flagship product. By focusing on commonalities across regulations, standards-based development, and simplified architectures, the UCF supports a strategic approach to IT compliance that reduces cost, limits liability, and leverages the value of compliance-related technologies and services across the enterprise. The UCF's content and methodology is the direct result of Network Frontiers deep understanding of IT regulations and standards and decades of experience consulting for clients, publications, and vendors in the mission-critical IT arena. The UCF was created by Dorian Cougias and his research partner, Marcelo Halpern of the international law firm Latham and Watkins, which oversees all legal aspects of the UCF. More information can be found at www.unifiedcompliance.com.