As you continue to monitor and manage your endpoints to ensure a secure and compliant environment for 2017, we’d like to wish you a very wonderful new year!
As part of our continued commitment to help you meet your endpoint security compliance objectives, we would like to highlight the contents and product enhancements that IBM has delivered in 2016 for IBM BigFix Compliance that includes Security Configuration Management (SCM) and Security Compliance Analytics (SCA).
- Up-to-date benchmark support
IBM closely monitors the new and updated benchmarks published by CIS, DISA, and USGCB and endeavors to deliver checklists based on these benchmarks. In 2016, BigFix Compliance delivered 18 CIS checklists and 15 DISA STIG checklist as follows:
-
Broader platform coverage
The checklist platform support has been extended to the following operating systems: -
Windows 10, IE 11, Mac 10.x, CentOS and OEL (for CIS)
-
Windows 10 and Mac OS 10.x (for DISA)
-
SCAP 1.2 validation
The SCAP tool included in the Compliance product has been validated for Red Hat Enterprise Linux by NIST. This allowed customers to use the tool to generate and process SCAP standard based configuration and vulnerability information. For more information about SCAP 1.2 support, see: Legacy Communities - IBM TechXchange Community. -
BigFix Compliance Analytics 1.9
BigFix Compliance Analytics provides a policy compliance reporting capability that allows for more effective analysis and reporting of different security configuration policies. Compliance PCI DSS policies are now generated based on this new reporting capability. For more details, see the Compliance 1.9 release announcement at https://ibm.biz/BdsQTj.
To find more information about the IBM BigFix Compliance checklists, see Legacy Communities - IBM TechXchange Community.
Let us know how we can further improve our product to better help you meet your goals for 2017. You can also e-mail I-Lung Kao, BigFix SCM/SCA Product manager, at ikao@us.ibm.com.
Looking forward to more journeys ahead! Thank you very much for the support.
– The IBM BigFix Compliance team