1. IT GRC With Symantec
Chris Collier
Presales Specialist
E: Chris.Collier@arrowecs.co.uk

2. Agenda
• What Is IT GRC?
• Common IT GRC Requirements
• Common Qualification Questions
• Symantec Control Compliance Suite
• Summary
• Upcoming Security Webinars
• Q&A
2

3. What is IT GRC?

4. What is IT GRC?
4
the overall management approach to direct and control
the entire organization.
the set of processes through which management identifies,
analyses & responds appropriately to risks that might
adversely affect the organization.
conforming with stated requirements
(defined for example in laws, regulations, contracts, strategies and policies)
Who does it involve?
IT GRC is dealt with by more than one business unit as it effects the entire
organisation.
C-level & Senior level executives will have more direct input into an organisations
IT GRC posture than at lower levels but it is the duty of all employee’s to ensure
the organisations IT GRC posture is maintained and enhanced.

5. Common IT GRC Requirements

6. Common IT GRC Requirements
6
- Find the potential risk exposure of an order
processing systems.
- Assess the entire risk exposure throughout the
company.
- Evaluate if company systems are
secured, configured, and patched according to
standards.
- Evaluate procedural controls by providing
automated Web-based questionnaires.
- Prepare for upcoming regulatory compliance
audits.
- Simplify policy management throughout the
company.

7. Symantec Control Compliance Suite

8. Control Compliance Suite
8
7 Key Components:
- Symantec™ Control Compliance Suite Risk Manager
- Symantec™ Control Compliance Suite Policy Manager
- Symantec™ Control Compliance Suite Standards Manager
- Symantec™ Control Compliance Suite Vulnerability Manager
- Symantec™ Control Compliance Suite Assessment Manager
- Symantec™ Control Compliance Suite Virtualization Security Manager
- Symantec™ Control Compliance Suite Vendor Risk Manager
All of these modules can be used separately or together , it is all dependant on the customers
requirements.

9. Common Qualification Questions

10. Common Qualification Questions
- Do you have to comply with any regulatory Standards/Frameworks?
- How are you ensuring that you comply with them?
- Have you ever risk assessed your business?
- How do you asses you business procedural controls?
- How are you ensuring that your staff are aware of business procedures?
- Do you know how vulnerable your business systems are?
10

11. Summary

12. Summary
- Managing IT risk and compliance in today's enterprise is challenging.
- Symantec Control Compliance Suite helps you address these challenges
- Control Compliance Suite provides a rich, data-driven view of your
customers environment.
- Symantec's Control Compliance Suite automates IT risk and compliance
processes
- Control Compliance Suite addresses IT risk and compliance challenges
through a four-step process:
- Plan
- Assess
- Report
- Remediate
12

13. Upcoming Security Webinars

14. Upcoming Security Webinars
Register at:
http://arrowecs.co.uk/Solutions/Security-Solutions/Symantec/Summer-of-Security-Webinar-Series

15. Questions?