Micro Focus ArcSight ESM Compliance Insight Package for Sarbanes-Oxley (SOX) version 5.0 is now generally available. It can be downloaded by licensed customers from the HP support web site. The solution guide and release notes can be found here.

 What's New?

The ArcSight ESM CIP for SOX 5.0 is a layered solution that leverages the more encompassing business policy focus of ISO/IEC 27002:2013 where it addresses the below objectives:​

• Compliance Reporting—supports the presentation of requirements to internal and external audit teams, as well as upper management.​
• Real-time Detection of Compliance Breaches—Pro-actively addresses compliance violations and up to date attacks​
• Security Best Practices—The ISO/IEC 27002 standards are internationally recognized frameworks for information security best practices. By delivering content based directly on ISO/IEC 27002 the CIP for SOX can be used to help implement, monitor and manage a best practices approach to information security management.​
• Automation of Monitoring-IT control—CIP for SOX follows and adapts to changes in the IT environment. More than 120 correlation rules can be used to monitor policy compliance violations in real-time.​
• Harmful User and Machine Monitoring – Tracks potentially harmful users and machines​
• Visualizing Security Events – Displaying security events graphically which allows analysts to quickly analyze situations​
• Vulnerabilities and Configuration changes Monitoring – Tracking vulnerabilities and configuration changes across the defense in depth layers​

About ESM Compliance Insight Package for SOX:

The ESM Compliance Insight Package for SOX provides ESM resources which enable you to measure and report on your compliance with the Sarbanes-Oxley act using the best practices outlined by the ISO 27002:2013 standard.

ArcSight Product Management