Demonstrating the effectiveness of security controls is a critical component of all leading policy frameworks such as COBIT, NIST, and ISO17799 - as well as the industry specific mandates they support, such as FISMA, Sarbanes-Oxley, PCI, HIPAA, and BASEL II. In reality, these “controls” are nothing more than the network and security devices that define boundaries and limit traffic. Unfortunately, most organizations fail to measure the effectiveness of security controls based on how traffic moves across the enterprise or between enterprises and beyond.

In a dynamic network environment, constant changes to the network cause defenses to become misaligned with policies. Failure to understand how traffic actually flows through or around defenses makes these gaps difficult to spot before a material weakness occurs. Quantifying risk from a network perspective, or network assurance, is therefore critical to ensuring compliance with policies and key regulations.

In this Webcast, Khalid Kark, Senior Analyst for Forrester and experts from Lumeta discuss how measuring and quantifying risk from a network perspective supports ongoing compliance initiatives.

• Apply network assurance to complement system and data security efforts to round out the risk management and compliance equation
• Use network risk data to validate that your defenses are aligned with policies
• Build a scorecard that quantifies network risk and measures effectiveness over time
• Make data more readily actionable for your risk management and compliance efforts