NextGen Compliance Management and Automation Solution

BRIGHT's Compliance Management and Automation Application for Splunk:

• Gets everyone on board – from C-Level to the technicians;
• Keeps business alignment and unifies the understanding of the organization’s strategy;
• Reduces manual effort and paperwork;
• Ensures near real-time compliance monitoring and valuable insights;
• Increases flexibility to rapidly adapt to ever-changing infrastructures, both on-premise and cloud-based;
• Improves both operational and audit compliance;
• Provides industry benchmarking;
• Supports a variety of compliance frameworks, including custom controls – CIS Controls, NIST, COBIT, ISO 27k, PCI, GDPR, HIPAA, etc.

Application Elements

Security Posture Dashboard

The dashboard provides a global overview of the implemented framework and organizational content for a selected period.

• Global Score - Gives us an aggregated average score of the compliance level with the implemented compliance framework;
• Categories Score - Framework's content organized in categories and scored from A-F or NYM (Not Yet Monitored);
• Controls and Sub-Controls Scores - Current score in near real-time, as well as the trend of change for the selected period, based on the data collected with Splunk;
• Metrics - Personalized perusal of the control from the client's perspective, depending on what we acknowledged as a best practice. Ability to create reports and custom alerts;
• Ability to add manual scores.

Maturity Dashboard

Full visibility of controls and sub-controls' performance. Shows the maturity of the organization regarding a selected standard. The chart can be custom, based on our perceptions and plans or the industry average.

Security One-Pager

Allows us to see the score of all controls that we are monitoring - fast and easy on a single screen with a trend line for all categories that we choose to group them in. It can be used in management meetings - communicating the current status more effectively, and following the progress.