RSA merges security and compliance management

RSA Security used the first day of its European conference to launch a system designed to help organisations identify and manage security vulnerabilities and threats while meeting complex compliance requirements.

The Advanced Security Operations function has been built around RSA's Archer eGRC platform, which pulls in risk- and security-related information from third-party systems, such as the RSA enVision platform, the RSA Data Loss Prevention Suite and RSA FraudAction service.

It therefore provides a centralised repository for this information, offering security teams real-time intelligence on the latest threats, as well as metrics about the effectiveness of security controls and security management processes, according to the vendor.

Security administrators are also able to analyse information about the security and business environment to work out the impact of various security measures on the business.

RSA chief operating officer Tom Heiser warned during the opening keynote that most organisations operate with dangerously fragmented systems and products.

Heiser argued that instead, firms need to move towards integrating people, processes and individual security controls so that they are "merged with the same type of correlated, contextual view as air traffic control systems".

"IT teams are saddled with multiple products and too many places to implement policy," he added. "There are gaps between products and a dangerous lack of visibility."