For more information on LEM, visit: http://www.solarwinds.com/log-event-manager.aspx Watch this webcast: http://www.solarwinds.com/resources/webcasts/regulatory-compliance-with-solarwinds-log-event-manager.html Logs have to be analyzed. Regulations around compliance and security such as CIP (Critical Infrastructure Protection), FISMA, and HIPAA require it. And let’s face it, log analysis is just a good practice. During this webcast we will discuss the challenges of using log management for real-time operational performance monitoring, compliance, and security. Learn what it takes to deliver a comprehensive view of the network and correlate the massive amounts of data to proactively respond to issues at network speed with SolarWinds Log & Event Manager.

1. The Geek Speaks Regulatory Compliance with SolarWinds Log & Event Manager

2. A big “Howdy” from SolarWinds® based in Austin, Texas Josh Stephens- VP of Technology & Head Geek Rob Johnson – Sr. Sales Engineer, SolarWinds LEM Today’s Topic: Regulatory Compliance with SolarWinds and LEM Who is SolarWinds? What we do… Who are our customers? The SolarWinds community… Introduction

4. Why regulatory compliance

5. Who needs to worry about compliance

6. Ups and downs of compliance

7. Common federal government policies and regulations

8. Demonstration of concepts discussed using SolarWinds applications

10. We only have an hour

11. No attendee left behind…

12. Ask questions!!!

13. Don’t be afraid to ask deeper questions

14. Don’t wait ‘till the end – ask away

15. Today’s session is being recorded

16. Recorded session on SolarWinds.com

17. Slides available on slideshare.comJ0sher2014

19. Verifying that procedures are being followed

20. Proving that policies are being upheld

21. Auditing compliance and capturing non-compliance

22. Traditionally it was all about “the paperwork” but not today

23. IT tasks

24. IT procedures

25. IT audit trailsJ0sher2014

27. Information Assurance (IA) owns the primary responsibility for verifying and documenting compliance

28. Everyone should understand compliance and why it’s important

29. Compliance is a primary role for IT

30. Most likely you’ll be providing reports to IA

31. Everything you do is subject to compliance guidelines, regulations, and policies

32. You’re in the hot seat if things go wrong J0sher2014

34. PCI – anyone that uses credit card information

35. NIST, FISMA, DISA – federal government agencies

36. HIPAA – anyone dealing with healthcare or patient information

37. SOX – publicly traded companiesJ0sher2014

39. It makes our networks, systems, and data more secure

40. It provides guidelines for intrusion detection and theft identification

41. It provides instructions for remediating intrusions

42. The cons of compliance

43. It can be very time consuming

44. Most people don’t do it often enough

45. Many of the tools available are hard to use and expensiveJ0sher2014

47. Federal, Manufacturing, Healthcare, Retail, Education, & Finance

48. Compliance needs vary by industry but are in essence very similar

49. Compliance tools can span multiple industries but require specific features for eachJ0sher2014

51. Regular review of log data for use in improving IT processes, policies, and procedures

52. Maintain secure audit trail of all network activity chain of custody is enforced

53. Track and alert on all activity related to impact on network performance and the protection of sensitive informationJ0sher2014

55. Provides real-time alerting and visibility into events of interest that impact compliance

56. Enforces the chain of custody by protecting log information during collection, analysis, and reporting

57. Provides immediate centralized access for constant log analysis and review

58. Highly effective event correlation

59. Automatically survaces anomalies and mitigates incidents

60. Quick and easy reportingJ0sher2014

61. - Slide 12 - SolarWinds Orion Demonstration

62. Summary and Q&A Thank you for attending! To learn more or to download free 30-day trials of SolarWinds products visit: www.SolarWinds.com Contact information Josh Stephens, Head Geek headgeek@solarwinds.com twitter: sw_headgeek Blog: http://solarwinds.com/geek