LogLogic Announces New Packages for SOX and PCI Compliance

LogLogic Compliance Suites help businesses meet compliance requirements and reduce costs through log data management

SAN JOSE, CA – September 18, 2007 – LogLogic®, the log management leader, today announced two updated packages for simplifying enterprise regulatory compliance. The LogLogic Compliance Suite: COBIT 4.1 and Sarbanes-Oxley (SOX) Edition automates the process of using log data to evidence and enforce internal SOX controls through COBIT 4.1. The LogLogic Compliance Suite: Payment Card Industry (PCI) Edition instantly turns log data into automated reports and alerts for monitoring PCI Data Security Standard compliance.

COBIT 4.1, which was published in May, is the most recent update to the set of IT best practices and control objectives for managers, auditors, and IT users to assist them in complying with SOX, which describes specific mandates and requirements for financial reporting. PCI describes specific mandates and requirements for retail companies and service providers that manage credit card transactions and other payment data information. Both PCI and COBIT 4.1 stipulate quantified log collection and storage thresholds.

"LogLogic is proud to be the first vendor to release automated log management reports that follow the guidelines of the newly released COBIT 4.1 framework," said Dominique Levin, CEO of LogLogic. "Log management is a foundational technology for overall governance, risk, and compliance by fingerprinting user and system activity. Through these Suites, we are committed to partner with our customers to achieve multi-regulatory compliance while at the same time significantly reducing audit costs."

Broadly, the LogLogic Compliance Suites (which also include FISMA, HIPAA, ITIL and ISO 17799) are targeted at specific regulations and help operationalize compliance efforts by alerting and reporting on log data, providing total and continuous coverage of systems to address incidents, and enabling enterprises to take control of and protect vital information.

Designed for IT professionals, auditors, and end-users, the SOX and PCI Suites each offers more than 20 new reports and support for a variety of different devices to address recent updates to COBIT and PCI. The Suites help mitigate the time and money companies spend on routine log management tasks (including log collection and storage, report writing, and audit sampling) designed for both IT security and regulatory compliance with SOX and PCI.

"The Compliance Suites turn vast amounts of raw log data, which could take months and millions of dollars to review manually, into automated reports and alerts, making short work of SOX and PCI compliance," said Jian Zhen, senior director of Product Management at LogLogic. "The value of being able to automate this previously labor-intensive, costly process makes the LogLogic Compliance Suites more than just technology solutions—they become business solutions as well."

The reports and alerts offered in the SOX Compliance Suite map directly to a number of the controls defined in the new COBIT 4.1 IT audit framework and both the PCI and the SOX Compliance Suites cover key areas of IT risk management, including access, activity, change, security, infrastructure, and continuity.

The new Compliance Suites start at $15,000. The LogLogic Compliance Suite: Payment Card Industry (PCI) Edition is available immediately while the LogLogic Compliance Suite: COBIT 4.1 and Sarbanes-Oxley (SOX) Edition will be available September 30, 2007. Existing LogLogic Compliance Suites customers on maintenance contracts update to the new Suites at no cost. For more information visit www.loglogic.com/products/compliance-and-control.

About LogLogic

LogLogic® provides the world's leading enterprise-class platform for collecting, storing, reporting and alerting on 100 percent of IT log data from virtually any device, operating system or application. The LogLogic family of MX and LX-ST appliances address the compliance, operations and risk mitigation needs of mid-market companies, as well as the most demanding global enterprises. LogLogic's innovations include creating the world's first search engine for fast-moving IT log data, and Compliance Suites that automate using that data to enforce critical controls and regulations. LogLogic has established a position as the market visionary and leader, with awards that include Info Security "Product Excellence Awards" 2008, SC Magazine 'Approved for SC Labs Rating' in 2006 and 2007, IT Week's 'Editor's Choice Award', AlwaysOn Top 100 Private Company 2006, Best of Interop 2005, SC Magazine's 'Best Computer Forensics', Info Security's 'Hot Company 2006', and designation to the Red Herring 100 in 2006. For more information, visit www.loglogic.com and http://blog.loglogic.com.

LogLogic disclaims any interest in the trademarks of others.

Technorati : Compliance, Log Management, Log Management & Intelligence

Posted September 24, 2007 08:00 AM