Security Expressions

Security configuration management solutions are
being deployed in enterprises to automate system
audits and ensure that all desktops, notebooks, and
servers are in compliance with the implemented
system security policy. Sarbanes-Oxley, HIPAA,
security breaches and failed audits are driving
enterprises to eliminate unauthorized access to
mission-critical data, ensure business continuity, and
increase the likelihood of a passing grade on the next
internal or third-party system security audit.

CUSTOMIZABLE AND FLEXIBLE SYSTEM
SECURITY POLICIES
Every organization is unique.Therefore, having an
audit and compliance solution that allows for
flexibility and customizability is key to both auditing
and compliance success. Altiris® SecurityExpressions™
includes industry best practices system security
policies that can be implemented directly or
customized to meet your needs. SecurityExpressions
also supports homegrown system security policies.
Both methodologies accelerate deployment while
ensuring rigorous best practices protection, including
NSA, NIST, CIS, SANS and more than 30 others.

AUTOMATED AUDIT AND COMPLIANCE
SecurityExpressions automates auditing and assessing
all desktops, notebooks, and servers against a system
security policy with audit task scheduling and
automated notification of results.

SECURITY COMPLIANCE BENCHMARKING WITH
ASSET CLASSIFICATION
Administrators can assign a weight to each rule as
well as an importance to each system. A single
measurement of audit compliance status is generated
for each system as well as the whole audit for easy
communication.

AGENTLESS AND/OR AGENT-BASED
SecurityExpressions is the first and only audit and
compliance solution to offer both an agentless and an
agent-based option for audit and compliance that can
be mixed and matched as required across all
Windows, UNIX and Linux desktops, notebooks, and
servers in your environment.The included agent does
not require administrative credentials and is a perfect
solution for auditing servers. SecurityExpressions also
has an agentless approach to reach tens of thousands
of systems, effective for auditing local/remote desktops.

SCALABILITY
The SecurityExpressions agentless option and central
database management configuration makes enterprisewide
audits, assessments and system updates simple
and scalable to tens of thousands of systems.With
Web-based management, servers can work together
from a central Web interface and database, distributing
the load of large audits easily and efficiently.

AUDIT-ON-CONNECT
With SecurityExpressions, systems can be audited as
they connect to the network rather than on a fixed
schedule.This allows for auditing systems that may
not be regularly or predictably connected to the
network such as field user notebooks.This also
allows for systems that are missed in a scheduled
audit to be picked up the next time they connect.

SELF-SERVICE AUDIT
SecurityExpressions’ Web-based management
provides a self-service audit capability, which allows
authorized users to connect to the server from a
system via Internet Explorer and audit the local
system with the corporate system security policy.
This provides self-serve assurance that an existing or
newly deployed system meets company security
requirements.