CSI | SystemSkan

Product Rationale
Why SystemSkan
Solution Features

SystemSkan

SystemSkan is an enterprise monitoring and control solution designed to protect intellectual property, stop internal threats, and assure compliance. This unique application is a fully integrated product suite which provides all of the functionality required to protect organizations from the 'Insider Threat', where companies are exposed by the misuse of corporate information and the abuse of IT resources.

Product Rationale

In today's technology intensive world, security awareness is at an all time high. While there are numerous externally focused antivirus, firewall and intrusion detection solutions which aim to protect the enterprise from outsider interference, it is now widely acknowledged that 70 to 80% of information security breaches originate internally. SystemSkan is a leading product which protects enterprises from internal breaches by providing an integrated internal security and policy enforcement solution.

Why SystemSkan

SystemSkan™ provides Managers and IT Administrators with the ability to view and record every user's actions on the network. Each user event is audited and can be controlled based on the rules set by the organization's corporate policy. SystemSkan can monitor and record program usage and file activity, generating various log reports which encompass all network activity. Unlike basic monitoring products which are purely reactive, SystemSkan provides both Reactive and Proactive security features. Reactively, SystemSkan logs all user activity and provides reports through its feature rich Reporting Wizard. Proactively, SystemSkan automatically screens all activity and can be configured to prevent and alert on inappropriate activities. This proactive approach prevents policy breaches in real-time.

By tracking and controlling every activity of every user on a computer network, SystemSkan allows management to monitor, restrict and control the activities of individuals or groups of users, thereby enforcing company security policies across the enterprise.

User Activity Audit - This comprehensive audit provides the company with a detailed report regarding the actual threats caused by users on the network who are misusing corporate information or abusing their privilege to use company IT resources.

IT Policy Review - A thorough review of the existing IT and Information Security Policy is conducted. As part of the review, the findings from the audit will be compared to the clauses in the Policy to determine whether or not the existing policy protects the company against the actual threats which are occurring on a daily basis. This review is also required to ensure that the Policy is aligned with local and international legislations, regulations and standards related to privacy and data protection.

Socialisation - This is a key part of the process whereby all staff are informed of the need to update the Policy and why this needs to be done. It is of utmost importance to explain that the heightened levels of security are required to protect the interests of the staff as well as that of the company, it's customers and suppliers. Staff must be made aware that by signing the new Policy, they agree to abide by the guidelines and will be accountable for their actions.

Policy Enforcement - Once the Socialisation process has been completed in conjunction with the Human Resource department, SystemSkan can be configured to automatically detect breaches of Corporate Policy, immediately stopping the user and sending an alert to the administrator.

Solution Features

Alert Manager

The Alert Manager notifies the SystemSkan Administrator of suspicious activities and potential policy breaches. Automated actions can then be enabled to prevent the breaches from occuring:

Automatic termination of the application.
Capture snapshots of a workstation screen.
Locks the workstation.

Asset Management - Software & Hardware Audit

The Asset Management module provides comprehensive software and hardware audits.

Remote Administration - Centralised Control

SystemSkan's Remote Administration provides centralised control of workstations on the network. Provides a helpdesk facility with integrated messaging and remote launching of applications.

Permission & Restrictions

The Permissions Manager allows SystemSkan Administrators to pre-define a list of applications, storage, network information and websites that can be accessed by each User Group. Restrictions can also be set on the use of removable media and storage devices.

Reports & Filtering

SystemSkan provides a complete audit trail of business and personal use of computers within the workplace.