The solution enables flexible database audit policies to support critical audit requirements such as Sarbanes-Oxley (SOX) and Payment Card Industry Data Security Standard (PCI DSS). AppSec’s DbProtect for DB2 on z/OS provides visibility into all activity occurring on the mainframe DB2 database including access to sensitive data and privileged user monitoring.
Monitoring database activity is a critical requirement to secure sensitive data and meet mandatory compliance regulations. By delivering a native z/OS DB2 collector covering all local and privileged activities, NEON extends the support of AppSec’s award winning DbProtect database SRC platform to organizations committed to mainframe technology. With this solution mainframe DB2 users gain a critical compliance control process to monitor real-time database activity and provide alerts of inappropriate access to sensitive data.
DbProtect for DB2 on z/OS offers significant price and performance advantages over legacy mainframe audit approaches by enabling audit policies to operate against sensitive DB2 objects without resource-intensive internal tracing facilities. In addition, audit processing is offloaded to zIIP (System z Integrated Information Processor) specialty engines, which minimizes impact on mainframe central processors and avoids increased mainframe software licensing costs. With mainframe audit and threat monitoring integrated in AppSec’s industry-leading DbProtect solution,
"A large percentage of sensitive enterprise data resides on mainframes," said Josh Shaul, vice president, product management, AppSec. "The AppSec and NEON alliance extends the enterprise platform support of DbProtect and delivers a solution to reduce the cost and complexity of securing, auditing, and monitoring mainframes."
"Mainframe users require auditing solutions built to the standards they are accustomed to," said Dan Hoffmann, director of product management at NEON. "The combination of NEON’s efficient DB2 for z/OS auditing technology and AppSec’s DbProtect will deliver database security, risk and compliance for DB2 on System z using the same user interface, policies, and procedures they use for non-mainframe databases."
About Application Security, Inc. AppSec is the leading provider of database security, risk and compliance (SRC) solutions for the enterprise. AppSec's agentless approach - AppDetectivePro for auditors and IT advisors, and DbProtect for the enterprise - delivers the industry's most scalable database SRC solution and is in use around the world in the most demanding environments by over 2,000 customers. The company was named to Inc. Magazine's 2007 (Inc. 500) and 2008 list of America's Fastest Growing Private Companies, and was also named to the 2008 Deloitte Technology Fast 50 by Deloitte & Touche.
For more information, please visit www.appsecinc.com | www.teamshatter.com
For a free database vulnerability assessment visit http://www.appsecinc.com/downloads/appdetectivepro/
Follow us on Twitter: www.twitter.com/appsecinc | www.twitter.com/teamshatter
About NEON Enterprise Software NEON Enterprise Software is a privately-held company with offices in Austin and Sugar Land, Texas that provides innovative mainframe software solutions to the world’s largest corporations. NEON products work to dramatically reduce the cost of mainframe computing, and they enable organizations to take control of the IT resources vital to their business success.
For more information about NEON, visit www.neon.com.