1053 - 客户经验：在多客户环境中实施和运行安全与合规性.pdf

1、zSCC Case studyImplementing zSCC in a multi-tenant environmentSession#1053 Implementing and running security and compliance in a multi client environment 1053Harald SrensenSystems Programmer,JN Data A/FFrancesca FerrettiIBM Z Security Sales Leader12COUNTRYBENCHMARKSINDUSTRYEUROPEAN UNIONAutomate com

2、pliance Automate compliance and reduce the costand reduce the cost61%61%organizations experienced compliance violation the past three years$2.3M$2.3Mcost difference for breaches with high vs low level of compliance failures3Security teams invest considerable time Security teams invest considerable t

3、ime on audit preparationson audit preparationsApproach Standardize controls from constantly evolving regulations like PCI DSS,NIST,CIS,DISA-STIG&DORA and reduce the risk of misinterpretation Automate controls validation and evidence collection to increase visibility into compliance oversights and re

4、mediation process Continuous monitoring and automated tracking to stay current,even as regulations and controls drift.Enable auditor collaboration with simple and persona tailored UXhttps:/ and cost saving by automating compliance with zSCCSource:IBM Cost of Data Breach Report 202470%of organization

5、s surveyed said that their compliance team will grow over the next two years3IBM Z Security and Compliance Center IBM Z Security and Compliance Center In ActionIn ActionHover and click to drill down to show failuresHover and click to drill down to show failuresDownload navigationalDownload navigatio

6、nal-able able Audit reportsAudit reportsSchedule automatic Audit scans Schedule automatic Audit scans Categorize Audit failures in Severity Categorize Audit failures in Severity Show Compliance Drift over time Show Compliance Drift over time drill downdrill down4Drop down into detail list of all pas