The compliance tag has no wiki summary.
2
votes
1answer
69 views
Configuration Compliance auditing for many CentOS 5.x boxes
Current Situation
I have a client with many (200x) CentOS 5.x servers deployed in various web, mail, database and file server roles, and these boxes have been variously administrated to a lessor or ...
0
votes
1answer
35 views
Network Change Control & Compliance
I'm looking for a network change management & compliance audit tool, I know that SolarWinds and tufin are very know.
Do you have any experience that you can share regarding these two or other?
5
votes
1answer
217 views
Has anyone achieved Level 1 PCI compliance on AWS?
All the FAQs, documents and statements published by AWS aside, did any Level 1 merchant actually achieve PCI compliance on AWS yet? We're evaluating moving some of our services to EC2/VPC, but our ...
4
votes
4answers
134 views
Compliance/e-discovery - message and SMS text archiving
I work in the financial trading industry and have a forthcoming regulatory requirement to begin archiving electronic communications. This includes social media, instant messaging (e.g. AIM and Yahoo ...
1
vote
2answers
106 views
Email Archive Solution
I need recommendation for Email archive solution. We have setup hosting and email server on one of government enterprise where they need to store all incoming/outgoing emails for compliance and ...
0
votes
2answers
164 views
Email Approval Process On Exchange Server
Are there any tools out there that allow you to check a box (or something like that) and say that you want to subject a given email for approval. Then, once the email is approved, it goes to the ...
12
votes
5answers
352 views
Long-term storage of Business Critical data
This is a really tricky one, and to some extent it's not a technical problem, and might not belong here, but
Server Fault is for system
administrators ... who manage or
maintain computers in ...
0
votes
1answer
167 views
Is there a tool to check GPOs like MBSA?
I'd like to provide some background before I pose my question so please, bear with me.
I have come across Microsoft's Security Compliance Manager. It's rather new to me and as I understand so far, ...
1
vote
2answers
116 views
What are the internet standards for the CNAME record?
I'd like to know what internet standard defines the CNAME
2
votes
1answer
226 views
What are HIPAA rules concering RPO and RTO for a doctors office?
I am planning system upgrades at several Group Practice doctor offices.
I am asking them questions concerning what their RTO (Recovery Time Objective) and RPO (Recovery Point Objective) may be so ...
2
votes
6answers
762 views
what's the difference between PCI and SAS 70 compliance when I am shopping for a hosting company to stick my servers in?
I am looking for hosting, ec2 is SAS 70 compliant (almost) and I would have gone straight for PCI compliant and tier 4 only but I'm considering SAS 70. What are the differences or similarities?
2
votes
4answers
69 views
Media / Printed material needed for Upgrade Compliance?
If we are buying new or used Windows FPP (Retail), we make sure we keep the Media, EULA, Manual, and License. Microsoft had informed us that all of these materials were required for proper license ...
6
votes
4answers
480 views
Backup is not Archiving - But what requirements does archiving have?
There's related thread on how to handle archiving. I'm asking on how to find the requirements in a company on the way archiving should be done, and also the requirements that need to be fullfilled so ...
2
votes
2answers
2k views
Are there any FIPS-140-2 certified solutions for Linux?
I'm not even 100% certain what this involves, but my current understanding is this:
use of only approved cryptographic algorithms for network traffic (easy, we use SSL and lock down the algorithms ...
