SOLUTION BRIEF (TRIPWIRE)

Tripwire ExpertOps and SOXThe Sarbanes-Oxley Act (SOX) requires all publicly held companies toestablish internal controls and procedures for financial reporting to reduce
the possibility of corporate fraud. SOX is not specific on the types of controlsthat are required, but points to the COBIT framework to provide organizations’guidance on their IT governance.

The Challenge

Change is ever-occurring in your systems and you need to know if thosechanges are impacting your regulated environment. Systems must be
properly configured and configurations should not drift out of compliance.
Constantly assessing configurations is a time consuming and complicated

HIGHLIGHTS• Quickly assess COBIT configurationsfor SOX compliance• Best-in-Class change audit reporting• Support from designated TripwireExperts• Cloud-hosted infrastructure
combined with consulting services• A library of COBIT configurations forassuring systems integritytask, however, and auditors want to see evidence of compliance.

The Goal: Be Prepared for Your Next Audit

Having the right controls in place is only part of the compliance challenge.
Ensuring all systems remain in a known good state, and assessing changes
that impact the integrity of your environment are critical for both data safety
and compliance. When an audit occurs, proving that controls are effective,configurations align with IT and COBIT policies, and that change is properly
managed can be a daunting task. Having audit-ready reporting reduces thetime IT and Security teams need to spend gathering evidence, and means
these teams are prepared whenever the auditor calls. Fortra’s Tripwire®
ExpertOpsSM adds valuable resources and expertise to your team to help
ensure audit success.

Your Solution: Tripwire ExpertOps

Tripwire ExpertOps combines managed services with the industry’s best File
Integrity Monitoring (FIM) and Security Configuration Management (SCM),
providing many of the security controls auditors are looking for. The solution
provides personalized consulting, audit support and cloud-based infrastructure
to help you achieve and maintain compliance. The solution is easy to deploy
and use, with simple subscription pricing and a low total cost of ownership.
Tripwire ExpertOps enables you to rapidly achieve SOX compliance byreducing the attack surface, increasing system integrity and deliveringcontinuous controls. Plus, because Tripwire ExpertOps includes personalized
consulting, you receive ongoing support from a designated Tripwire Expert.

Fortra.com

Page 1Fortra Solution BriefBenefits• SOX audit support

Tripwire ExpertOps and SOX

SOX &COBITTripwire
ExpertOps Coverage• 24/7 compliance visibility via a customized dashboard

CONTINUOUS AND SUSTAINED COMPLIANCE• Alerts and reports in your inbox

Standardized
automated controls
reduce compliancerisk and manual work

• Waivers and change requests made easy
• No more awkward or incomplete hand-offs when yourstaff changes

How It Works

Tripwire ExpertOps provides you with continuous staffing
to operate and manage Tripwire-provided SOX controls

COBIT: ACQUIRE AND IMPLEMENT (AI)AI2.3:
Application Controls
and Auditability

Tripwire ExpertOps can capture failed
login attempt messages, information oncommands and system calls executedon the local system. It logs “interesting”
system events without consuming excessive amounts of resources capturing entire
voluminous and noisy logs.

AI3.3:
Infrastructure
Maintenance

Tripwire ensures that changes are controlled in line with the organization’schange management procedure. Tripwire
ExpertOps identifies changes across theentire IT infrastructure, then compares
detected changes to changes that wereauthorized by the organization’s change
management procedure then reports on
unauthorized changes.

AI6.4:
Change Status Tracking
and Reporting

Tripwire ExpertOps helps make certain
approved changes were implemented asplanned, and can report on changes thatwere expected but never made. It canalso compare actual to expected changedetails and Identify changes that werenot made as expected. Integrations withITSM tools such as ServiceNow, Remedy
and Jira provide validation and documentation of planned changes, as well as
automatable storage of “before and after”
snapshots of systems.

at peak efficiency. The solution adapts to your uniqueenvironment—reports and profiling tasks are customized tomeet your specific needs. You will receive expert guidance
to configure your system and policy configurations to bestalign with your requirements, and gain visibility via 24/7
access to compliance information via a tailored dashboard
and management console.
A Tripwire Expert will act as an extension of your team byprioritizing work efforts and managing critical escalations.
Together you will jointly develop a Service Plan that outlines
communication practices, escalation procedures and any
specialized requests.
The Tripwire Expert will then tune and operate your Tripwireprovided SOX controls to provide:• Prescriptive policy and content guidance to enable SOX
compliance for your specific network or system security
requirements• Recommendations for maximizing automation
capabilities for compliance and event alerting
practices, change management process integrations,and audit prep activities

COBIT: DELIVERY AND SUPPORT (DS)DS4.5:
Testing of the IT
Continuity Plan

Tripwire ExpertOps can compare production systems to their disaster recovery
counterparts and identify differences
showing that the two environments are inor out of sync.

DS4.8:
Services Recovery
and Resumption

Tripwire ExpertOps speeds recovery fromoutages by quickly answering the question“What changed?”

DS5.3:
Identity Management

Tripwire ExpertOps monitors accounts
maintained in LDAP directory services suchas Active Directory, and detects additions,deletions and changes. It then compares
detected changes to changes that wereauthorized.

• Prioritized remediation to identify opportunities toefficiently improve compliance posture• Organizational grading for each accountabledepartment to provide visibility into groups needing
additional resources and attention
Get 24/7 visibility without deploying additional hardware,
databases and back-end software. Tripwire ExpertOps isbuilt on a cloud computing platform, allowing the service

Tripwire ExpertOps can develop scheduled
tasks to continuously monitor SOX-scoped
environments, providing regular reportingand meeting with IT staff to ensure compliance is on track.

to quickly scale to meet your needs while maintaining highFortra.com

Page 2Fortra Solution Brief

Tripwire ExpertOps and SOX

levels of security. The service uses a single-tenancy model
to ensure that data remains segregated between customer
accounts. Tripwire applies multiple controls for security
and privacy of your data, including secure configurations,
vulnerability scanning, data encryption, malware
defenses, access control, log management, multi-factor
authentication, VPN and much more.

Ready to Take the Next Step?

Get in touch with your Tripwire Account Manager—or visit
www.tripwire.com/contact-us—to develop a custom Service
Plan for Tripwire ExpertOps.

Migrating from Tripwire Enterprise?

We can help with migration services and pricing. Contact
your Tripwire Account Manager for details.

About Fortra
Fortra is a cybersecurity company like no other. We’re creating a simpler, stronger future for ourcustomers. Our trusted experts and portfolio of integrated, scalable solutions bring balance andFortra.com

control to organizations around the world. We’re the positive changemakers and your relentless ally toprovide peace of mind through every step of your cybersecurity journey. Learn more at fortra.com.

© Fortra, LLC and its group of companies. All trademarks and registered trademarks are the property of their respective owners.

(fta-tw-ds-0523-r1-hm)