PRODUCT SHEET CA Compliance Manager for z/os CA Compliance Manager for z/os CA Compliance Manager for z/os (CA Compliance Manager) provides your organization with a single source for real-time, compliancerelated information and events occurring within the mainframe environment. It does all this without the need for additional mainframe staff and manual processes to extract data needed for compliance reporting and risk mitigation. Overview CA Compliance Manager provides ROI and value for your organization with: Streamlined regulatory compliance: Continuously monitors compliance and security-related information and events based on policy configuration Provides robust reporting and real-time alerts that effortlessly and reliably demonstrate compliance with external and internal policies and government regulations Risk mitigation Facilitates faster identification, escalation and resolution of questionable security activity Enables post-event forensic analysis of root causes of events and mitigates the risk of reoccurrence Reduced security management costs Helps your organization save time and resources by replacing costly manual compliance processes with preemptive, automated and repeatable processes Operates with the base security products (CA ACF2 and CA Top Secret ) to integrate with CA Technologies distributed solutions to reduce the learning curve and provide an enterprise-wide view of compliance
Business value CA Compliance Manager helps organizations address the following business challenges: Scarcity of resources and out-of-control compliance cost Inability to provide assurances to auditors and management that effective controls are in place Need for a proactive, real-time approach to shorten risk- and threat-management time lines Growth in the number of regulations and an inability to scale manual, ad-hoc processes to address them Overwhelmed IT staff resulting from more frequent audits and special requests for compliance-related clarifications that require specific skills In-house procedures that are inconclusive, time-consuming, error-prone, fragile and not repeatable Need for a cost-effective, automated way to monitor, report and investigate privileged user behaviors Features Mainframe 2.0 CA Compliance Manager has adopted key Mainframe 2.0 features that are designed to simplify your use of CA Compliance Manager and enable your staff to install, deploy and maintain it more effectively and quickly. CA Mainframe Software Manager : CA Mainframe Software Manager (CA MSM) automates CA Compliance Manager deployment and maintenance and removes SMP/E complexities. The Software Acquisition Service enables you to easily move product installation packages and maintenance from CA Support Online directly to your mainframe environment and prepare them for installation. The Software Installation Service standardizes CA Compliance Manager installation, which includes a new, streamlined Electronic Software Delivery (ESD) method that allows CA Compliance Manager to be installed using standard utilities. This service also provides standardized SMP/E product installation and maintenance via APARs and PTFs, and simplifies SMP/E processing through an intuitive graphical user interface and an intelligent installation wizard. 2
The Software Deployment Service enables you to easily deploy CA Compliance Manager in your mainframe environment. CA MSM Consolidated Software Inventory (CSI) updates and infrastructure improvements add flexibility to CA MSM processing of CSIs and enable CA MSM to more effectively utilize CPU and system memory. Installation Verification Program (IVP) and Execution Verification Program (EVP): As part of qualification for inclusion in the set of mainframe products from CA Technologies released every May, CA Compliance Manager has passed stringent tests performed through the IVP and EVP to find and resolve interoperability problems prior to release. These programs are an extension of CA Technologies ongoing interoperability certification initiative launched in May 2009. Best Practices guide: This guide provides information on CA Compliance Manager installation, initial configuration and deployment to shorten the learning curve for staff who are responsible for the installation and management of this product. Other key features With increased compliance requirements and during these tough times, enterprise organizations must focus on core activities that deliver real value, minimize risk, reduce the total cost of compliance (TCC) and enable lean operations. The move from a reactive compliance stance to a proactive stance with cost-effective management is the key to reducing the cost and complexity of compliance. Enterprise organizations must move from the minimum requirements of regulatory compliance to a higher level of internal policy compliance. CA Compliance Manager provides real-time alerts based on policy-defined events, reports on collected activity at any time, and continuously monitors your audit policy to capture non-compliant activities in real-time. Change monitor engine: Detects and records changes to CA ACF2, CA Top Secret, and IBM RACF configurations, operating system security configuration, and selected PDS/PDSE data sets-----identifying and recording specifically what was changed. Data warehouse engine: Stores information about mainframe security events in a relational repository that is accessible for compliance reporting, allowing complex reporting processes to be initiated. It also provides real-time access to current and historical security information for forensic analysis, going beyond current reporting capabilities of security products. 3
Flexible alert capabilities: Provides real-time notification of potential security breaches indicated by changes in the security configuration and specific security events. Stakeholders can receive immediate notification of pertinent violations, user activity, and access or change activity to critical resources using email notification, Write To Operator (WTO), or help desk ticket creation. Powerful collection components: Writes information about mainframe security events to a dedicated z/os log stream. A historical record of security events is maintained to address compliance/audit requirements and security forensics. This approach provides greater capability and is easier to use than standard log collection using SMF and file-based security journals. Web-enabled user interface: The web enabled user interface provides summary and detailed reports that answer the audit questions of Who accessed what, from where and when. For example, you can report on everything a specific user has accessed or everyone who accessed a resource due to a specific permission. Using the native security products, you control who can run the reports. In addition to reporting, the web interface is used to paint the policy statements by having the user pick fields to test and the actions to take. This eases the writing of policy by eliminating the requirement to learn another syntax. Delivery approach CA Services provides a portfolio of mainframe services delivered through CA Technologies internal staff and a network of established partners chosen to help you achieve a successful deployment and get the desired business results as quickly as possible. Our standard service offerings are designed to speed deployment and accelerate the learning curve for your staff. CA Technologies field-proven mainframe best practices and training help you lower risk, improve use/adoption and ultimately align the product configuration to your business requirements. 4
Benefits CA Compliance Manager meets the challenges of minimizing cost, maintaining compliance for z/os systems, addressing increasing workloads, and decreasing mainframe skill sets by allowing organizations to easily manage and audit their mainframe environment. It accomplishes this with continuous, real-time monitoring and collection of compliance and security-related information, policy alerting, and an intuitive reporting interface for compliance and security event reporting. CA Compliance Manager provides powerful internal controls to help ensure that only authorized access is allowed. It also gives you the comprehensive auditing skills that you need to prove your compliance to IT and risk-management auditors. The CA Technologies advantage CA Technologies has 30 years of recognized expertise in robust, reliable, scalable, and secure enterprise-class IT management software. CA Compliance Manager is a key component of the Mainframe 2.0 initiative from CA Technologies to change the way the mainframe is managed forever by helping you maximize the value of our mainframe products and by providing a simplified experience and innovative solutions that deliver value quickly and flexibly. Copyright 2011 CA. All rights reserved. All trademarks, trade names, service marks and logos referenced herein belong to their respective companies.racf and z/os are trademarks of International Business Machines Corporation in the United States, other countries, or both. This document is for your informational purposes only. CA assumes no responsibility for the accuracy or completeness of the information. To the extent permitted by applicable law, CA provides this document as is without warranty of any kind, including, without limitation, any implied warranties of merchantability, fitness for a particular purpose, or non-infringement. In no event will CA be liable for any loss or damage, direct or indirect, from the use of this document, including, without limitation, lost profits, business interruption, goodwill or lost data, even if CA is expressly advised in advance of the possibility of such damages. CS0548_0211 5