ArcSight
enabled T.Rowe Price to take a
comprehensive approach to log
aggregation, monitoring and
forensics-and thereby comply with
the Sarbanes-Oxley and SAS 70 and
improving their overall security
posture.
Business
Challenge:
After
preliminary Sarbanes-Oxley and SAS
70 audits, internal findings at
T.Rowe Price showed that the
investment-management firm could
receive bad marks because it didn't
have a system for managing security
event logs.
Solution:
ArcSight is
helping T.Rowe Price on both the
audit and security fronts. An
administrator can run monthly,
weekly or daily reports on nearly
any data collected. The reports
provide auditors and high-level
managers with a visual of what's
happening in the environment.
Benefits:
By collecting
security events from multiple
devices into a central location, the
SIM allows T.Rowe Price to
correlate events and trigger alerts.
It also helps the security team with
forensics work, such as tracking
down workstation infections. "It
allows us to do a lot of forensic
analysis...all in one location
versus having to visit the desktop,
the server or the proxy logs
manually," says David Maas, senior
network security engineer at T.Rowe
Price. "It definitely saves us a lot
of time."
Click here to get more information about ArcSight.
