DATASHEETCONFIDENCE:SECURED

ADVANCED THREAT PROTECTION, SECURITY AND COMPLIANCE

TRIPWIRE BENCHMARKSECURITY PERFORMANCE MANAGEMENT THROUGH METRICS, SCORECARDS AND INDUSTRY BENCHMARKS

KEY BENEFITS » Security performance management based on objective, fact-based metrics

» Consistent metric model ensures reliable results

» Compares performance to internal goals and industry peers

Tripwire® Benchmark is the first Security Performance Management solution that enables organizations to measure performance to their own goals and benchmark performance to industry peer groups. Today’s IT teams are inundated with security and compliance data, but too often they don’t have the tools to monitor and effectively communicate the state, quality and effectiveness of their organization’s security and compliance investments and initiatives to both security and non-security professionals. Tripwire Benchmark provides organizations a metrics language to describe their company’s security performance just like the CFO describes financial performance.

Tripwire Benchmark is the first publicly-available benchmark service designed to help organizations under-stand where resources and investments are most effective. As a cloud-based service, it delivers complete visibility across security and compliance solu-tions from a large number of vendors across several disciplines including vulnerability management, patch management,configuration audit-ing, identity and access management, anti-virus and endpoint protection.

Tripwire Benchmark delivers on the promise of security and compliance solutions. For the first time, organiza-tions can compare their security and compliance programs against industry benchmarks that are continuously updat-ed by similar organizations. Tripwire Benchmark enables organizations to:

» Reduce security risk and compliance exposure with continuous control monitoring and assessments;

» Increase assessment reliability and confidence through fact-based metrics and scorecards; » Generate increased security and compliance awareness through role-based alerts and workflows; » Automate and integrate your control assessments, evidence gathering and reporting: and » Cut compliance management and audit cost with unified reporting and evidence management

HOW IT WORKSTripwire Benchmark gathers and aggregates data from an organization’s existing security solutions, includ-ing vulnerability management, patch management, configuration auditing, identity and access management, anti-virus and endpoint protection. Metrics are calculated and delivered into score-cards for visualization designed for a variety of audiences, enabling organiza-tions to measure and track their security and compliance posture over time.

u Tripwire is a leading provider of advanced threat, security and compliance solutions that enable enterprises, service provid-ers and government agencies to confidently detect, prevent and respond to cybersecurity threats. Tripwire solutions are based on high-fidelity asset visibility and deep endpoint intelligence combined with business-context, and enable security auto-mation through enterprise integration. Tripwire’s portfolio of enterprise-class security solutions includes configuration and policy management, file integrity monitoring, vulnerability management and log intelligence. Learn more at tripwire.com. u

SECURITY NEWS, TRENDS AND INSIGHTS AT TRIPWIRE.COM/BLOG u FOLLOW US @TRIPWIREINC ON TWITTER

©2014 Tripwire, Inc. Tripwire is a registered trademark of Tripwire, Inc.All other product and company names are property of their respective owners. All rights reserved. NCBM1a 201308

Then, organizations can develop benchmarks by comparing their scorecards to similar organizations, providing insight how the organiza-tion is doing compared to its peers.

TRIPWIRE BENCHMARK IS HIGHLY SECURE The Enterprise Scorecard Pack overlays a completely tailorable C-level view to the extensive collection of metrics and scorecards available in Tripwire

Benchmark. This executive view is oriented towards communicating security performance in the context of business initiatives. The Enterprise Scorecard Pack’s easily implemented sample framework presents a business objective of ‘Protect the Organization’ supported by the more detailed business objectives of ‘Protect the Infrastructure,’ ‘Protect Identities’ and ‘Protect Information.’ The Enterprise Scorecard Pack rolls up detailed metric performance indicators of security

and compliance into meaningful and actionable presentations that are consumable by security and non-security professionals alike.

BROAD RANGE OF SCORECARDS Tripwire Benchmark offers a broad range of visual scorecards, grouped as “Scorecard Packs,” that allow an organization to view results in the context of their business.

Tripwire Benchmark Scorecard Packs include:

» Identity and Access Management » Antivirus and Endpoint Protection » Vulnerability Management » Configuration Auditing » Patch Management » CIS » CyberScope and SCAP, for government environments

uu TRIPWIRE BENCHMARK delivers visually rich scorecards based on industry best practices that show at-a-glance how well security and compliance systems are performing—and how your performance compares to industry standards.