McAfee Policy Auditor

• Unify management of policy audits and endpoint security

Build confidence with external auditors

• Easily import and audit against authoritative policy benchmarks

Prove compliance consistently

• Report against key industry mandates and internal policies

• Up-to-date data, powerful dashboards and reports, and built-in waiver management simplify every step

• Remediate non-compliant systems with McAfee Remediation Manager

Benefits:

• Simplify operations
  Unify management of policy audits and endpoint security to eliminate manual steps and reduce effort and error
   
• Build confidence with external auditors
  Reduce misinterpretation by directly importing and auditing against policy benchmarks downloaded from authoritative sources such as NIST and Red Hat
   
• Prove compliance consistently
  Leverage pre-built policy templates that map IT controls to policy, eliminating manual effort and demonstrating adherence to key industry mandates and internal governance policies
   
• Automate manual audits
  Schedule automatic reports with up-to-date data, create custom dashboards and reports, and apply built-in waiver management to speed every step of compliance validation
   
• Enforce compliance
  Go beyond identifying problems. Import Policy Auditor results into McAfee Remediation Manager for automated remediation of non-compliant systems

Features:

• Predefined templates for industry regulation
  Policy Auditor ships with templates for seven benchmarks: PCI DSS, SOX, GLBA, HIPAA, FISMA, and the best practice frameworks ISO 27001 and COBiT. These customizable checks provide detailed compliance assessment of IT controls
   
• New standards in compliance validation
  New standards in compliance validation McAfee Policy Auditor is Security Content Automation Protocol (SCAP) validated enabling agencies to comply with the Federal Desktop Core Configuration (FDCC) standard. SCAP standardizes the protocols and information communicated between products and services. McAfee correlates policy violations and security configurations to the entire family of SCAP protocols
   
• Unprecedented integration with ePO
  Four Policy Auditor tabs within the ePO console provide easy navigation through audit processes. The single ePO console lowers cost of ownership by consolidating endpoint security management and compliance management, easing agent deployment, management, and reporting
   
• Fast, automated import of industry benchmarks
  Download benchmarks from authoritative sites, and, within minutes, view detailed security guidance. A wizard helps you author, import, tailor, edit, and publish benchmarks. You can confirm regulatory compliance or design your own internal governance policies based on security community best practices
   
• Continuous Audit Model and Blackout Window
  Security and audit teams can set the frequency of data capture to support automated reports with accurate data. To prevent disruption to critical business applications, a blackout window lets IT operations block audit data capture during key business periods
   
• Advanced, extensive check library
  Leverage the industry's most extensive check library with predefined templates that assess configurations and access policies on multiple platforms, including Windows, Solaris, Red Hat, HP/UX, and Mac OS-X. McAfee AVERT® Labs researchers keep checks up-to-date