The Register® — Biting the hand that feeds IT

Feeds

Tivoli integrates compliance management

Automated tool contrast policies with behaviour

Agentless Backup is Not a Myth

IBM has finally finished digesting Consul InSight, the risk management software that it bought last December, and has re-released it in expanded form as Tivoli Compliance Insight Manager.

Now linked into other Tivoli products, such as Security Operations Manager, Identity Manager and Access Manager, the updated software allows companies to track, report and investigate non-compliant behaviour across the enterprise by automatically comparing user activity to defined policies, Big Blue claimed.

TCIM's integration with the other Tivoli elements now allows it to report on and audit the actions of privileged users - for example, taking detailed notes when a system administrator changes a user's role or authorisation level. It also lets it import user and security logs and analyse them for long-term trends, and recognise and respond to attacks in real-time.

The software includes a compliance dashboard and a number of standard regulatory audit and compliance reports. Custom reports can be created and distributed via its policy and report definition mechanisms.

Due to go on sale next Friday, TCIM also supports the needs of auditors by translating captured security data into a common format that can be understood even if the auditor is not intimately familiar with the area of the business where is was collected, IBM said.

Kristin Lovejoy, IBM's head governance and risk management strategist, claimed that the only way to get business value from compliance management was to automate and consolidate it. She quoted a Gartner estimate that using separate tools for each regulatory challenge could cost ten times as much as an integrated approach to compliance.

"Companies today are dealing with an increasingly complex regulatory environment, along with growing IT environments and increasing demands to run secure and highly resilient businesses," she said. She added that TCIM "provides a valuable, automated management tool for improved organisational efficiency and fast response to security and compliance violations."®

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

More from The Register

SCO vs. IBM battle resumes over ownership of Unix
Zombie lawsuit back and wants to suck the brains out of Linux
Bjarne Again: Hallelujah for C++
Plus: Now officially OK to admit you never used STL algorithms
Interwebs taunt Sir Jony over Apple eye candy makeover
Hey Ive, Ive... add more unicorns, willya?
Apple: iOS7 dayglo Barbie makeover is UNFINISHED - report
Plus: You don't like the icons? Blame marketing
Red Hat to ditch MySQL for MariaDB in RHEL 7
So long, Oracle! Don't let the door hit you on the way out
Shy? Socially inadequate? Fiddling with your phone could help
App 'tells the brutal truth' about social inadequates' chatup lines
Java EE 7 melds HTML5 with enterprise apps
New release arrives with GlassFish, NetBeans support
 breaking news
'Office Facebook' firm Tibbr wants you to PAY for mobe-meetings app
Great idea. Punters won't cough for it though
 breaking news
The only Waze is Google: Ad giant tipped to gobble map app 'for $1.3bn'
Pac-Man-satnav-ish upstart in bidding war with Apple, Facebook
 breaking news
PM Cameron calls for modern, programmable computers! (We think)
IT education musings to G8 chiefs to mystify IT industry