Automated Security Policy/Standard/Plan Repository, Analyzer, and Generator

A security policy repository, analyzer and generator keeps every policy, standard and plan in one place, checks them for gaps against the frameworks that apply, and drafts what is missing. DigitalXForce does this in the Policy and Compliance Management module, which ships with 20+ policies, 15+ standards and 5 plan templates, benchmarks them against NIST and industry regulation, and publishes the results to the controls they govern. It runs on the TRiSCM platform, and the terms used here are defined in the DigitalXForce glossary.

Continuous Control Assurance (CCA) uses evidence, monitoring and validation to determine whether controls continue to operate as expected. The analyzer publishes its results to the controls each policy governs. CCA then shows whether those controls still work the way the policy says.