IT Security Auditors

Security audits are becoming a standard part of the corporate IT landscape. As concerns over network security grow, more organizations are required to perform regular audits and demonstrate compliance with corporate, regulatory and industry standards. Yet firewalls are some of the most complex devices in the IT landscape, and the configuration of firewall policies is constantly changing.

When it’s time for a corporate security audit, external, third-party auditors perform an important function, providing both expertise and objectivity. But auditing is a time-consuming and painstaking task. To make the process more efficient and to ensure an accurate result, auditors and their customers need automated tools that can quickly assess the current network security posture and generate clear, concise reports along with strategies to mitigate threats.

Tufin Security Suite for Auditors

Tufin Security Suite enables IT security auditors to quickly and efficiently perform compliance audits for their customers. The solution provides a set of customizable audit reports that rapidly assess the organization’s security risk posture, it’s compliance with standards, and the health of the security policies deployed on the network.

The Tufin solution for auditors features special single-use licensing that enables auditors and their enterprise customers to benefit from the power of Tufin’s auditing and compliance features upon demand, or periodically – as required.

Benefits for auditors and their customers

• Dramatically reduces the repetitive, manual tasks involved in audit preparation
• Cost-effective solution for one-time or periodic use at multiple customer sites
• Improved communication with customers and regulators with customizable reports
• Value-added services including rule base optimization

• Proven compliance with corporate, industry and regulatory standards
• Faster, more cost-effective network security audits
• Better network security owing to concrete recommendations
• Visibility into the auditing process and results
• Smoother interaction with regulatory authorities
• Optimized performance for firewalls, routers and other security infrastructure

Features of Tufin Security Suite for Auditors

• Security Risk Report: Checks the organizations current security risk profile including historical trends.
• Rule and Object Usage Analysis: Analyzes the policy of a security device and identifies rule and object usage statistics, rule shadowing, and more.
• PCI DSS Audit: Checks compliance with the latest credit card data security standard.
• Best Practice audit: Checks conformance with vendor and industry best practices for clear, maintainable policies.
• Corporate compliance audit: Checks conformance to corporate policy as defined by white lists, black lists, and business continuity requirements.
• Firewall operating system baseline comparison: Checks the configuration of the firewall device operating system.