Policy Monitoring

The challenges that the Policy Monitoring service address:

• Ensuring that employees in the company are not unlawfully using the company's computers and network.
• Ensuring that established regulations are observed from a security perspective.

Most companies and organizations have IT security policies specifically designed to fit the organization. The challenge is to ensure that the policy is observed, since it is common and increasingly easy, intentionally or unintentionally, to install software on computers, which directly conflicts with the policy.
Policy monitoring helps organizations to continuously monitor that the existing information security policy is being observed and that steps are taken in the event of a breach or deviation from this policy.
Secode's Policy Monitoring service provides customers with a 24-hour function that alerts for policy breaches. The functionality is implemented with the help of IDS technology and can be adjusted to represent the organization's IT security policy.

The service provides:

• 24/7 monitoring for security policy breaches.
• A technical implementation of the security policy, alerting on deviations of the policy.
• A highly configurable set of rule which can be adapted to fit the security policy.
• Reduced risk of spreading viruses and/or distributing forbidden or secret material.
• Free internal resources.
• Well-defined content for the services specified in the SLA (Service Level Agreement).

Reporting
The service includes a monthly report, presented to the customer by a security specialist and daily incident reports summarizing the previous day's policy related activity.

Result
The Policy Monitoring service implements the security policy technically and alerts on policy breaches, producing measurable results reflecting user behaviors.