¾ã¦X + ³Ð·s = ªk³W¿í´`®Ä²v
»Ýn¥i¾aªºªk³W¿í´`ÃÒ©ú¶Ü¡H µL¶·®`©È¡C McAfee Policy Auditor 5.0 ¬O¥þ·s³]pªº²£«~¡A¥i¥H¦Û°Ê¤Æ¤º³¡»P¥~³¡ IT ½]®Ö§@·~ªºµ{§Ç¡C ¥¦¨ã³Æ¸g¹LÅçÃÒªº¥N²zµ{¦¡¡B¤ä´©¦hºØ¤º®e¼Ð·Ç¡A¨Ã¥B¥i¥H©M McAfee ePolicy Orchestrator® (ePO™) ³z³q¦a¾ã¦X¡A¥Ã»·¥i¥H¶i¦æ·Ç½T¡B¦³®Ä²vªº½]®Ö¡C ¦]¦¹¡A±z¥i¥H¦^¨ìºÞ²z·ÀIªº¤u§@¤¤¡AµL»Ý±N®É¶¡®ö¶O¦b®Ñ±§@·~¤W¡C
ÀuÂI:
-
²¤ÆÀç¹B§@·~
¾ã¦X¬Fµ¦½]®Ö»PºÝÂI¦w¥þªººÞ²z§@·~¡A±Æ°£¤â°Ê¨BÆJ¨Ã´î¤Ö¤H¤O»P¿ù»~ -
ÁYµu²Å¦Xªk³Wªº®É¶¡
¥i¥H¹ï¨üºÞ²z (¥N²zµ{¦¡«¬) ©M¥¼¨üºÞ²z (µL¥N²zµ{¦¡) ¨t²Î°õ¦æ¾ã¦X¦¡ªº½]®Ö -
«ùÄòÅçÃÒªk³W¿í´`ª¬ºA
¨Ï¥Î±N IT ±±¨î¶µ¥Ø¹ïÀ³¨ì¬Fµ¦ªº¹w¸ü¬Fµ¦½d¥»¡A¥H«K±Æ°£¤H¤u§@·~¡A¨Ã¥B®i²{¿í¦u¥Dn²£·~¼Ð·Ç»P¤º³¡ºÞ²z¬Fµ¦ªº¨M¤ß -
§K°£ÁʶR¨ä¥LÀɮק¹¾ã©ÊºÊ±±²£«~ªº»Ý¨D
¨Ï¥ÎÀɮק¹¾ã©ÊºÊ±±¯à¤O¨Ó²Å¦X¥Dnªk³Wªº»Ý¨D -
¦Û°Ê¤Æ¤H¤u½]®Ö§@·~
±Æµ{¦Û°Ê²£¥Í¨ã³Æ³Ì·s¸ê®Æªº³øªí¡B«Ø¥ß«È»s¤Æªº¼Æ¦ì»öªíªO»P³ø§i¡A¥H¤Î¨Ï¥Î¤º«Øªº©ß±óºÞ²z¨Ó¥[³tªk³WÅçÃÒªº¨C¤@Ó¨BÆJ -
¸¨¹êªk³W¿í´`
¤£¶È¬O§ä¥X°ÝÃD¡C ±N Policy Auditor ªºµ²ªG¶×¤J¨ì McAfee Remediation Manager¡A¥H¹ï¤£¦X¥Gªk³Wªº¨t²Î¶i¦æ¦Û°Ê¤Æªº×¸É
¯S¦â:
-
°w¹ï²£·~³W½d³]pªº¹w¥ý©w¸q½d¥»
Policy Auditor ¤º«Ø¦hºØ½d¥»¡A¥]¬A PCI DSS¡BSOX¡BGLBA¡BHIPAA¡BFISMA¡A¥H¤Î ISO 27001 »P COBiT ªº³Ì¨Î¹ê¬I¬[ºc¡C -
ªk³WÅçÃÒªº·s¼Ð·Ç
McAfee Policy Auditor ¸g¹L Security Content Automation Protocol (SCAP) ªºÅçÃÒ¡A¥i¥HÅý¥N²zµ{¦¡²Å¦X Federal Desktop Core Configuration (FDCC) ªº¼Ð·Ç¡C -
©M ePO »P Vulnerability Manager ¨ú±oµL»PÛ¤ñªº¾ã¦X©Ê
³æ¤@ ePO ¥D±±¥x¥i¥H¾ã¨ÖºÝÂI¦w¥þºÞ²z»Pªk³WºÞ²z¤u§@¡A´î¤Ö¥N²zµ{¦¡³¡¸p¡BºÞ²z»P¦^³ø§@·~¡AÂǦ¹°§CÁ`«ù¦³¦¨¥» ©M Vulnerability Manager ¾ã¦X¥i¥HÅý²Õ´·J¾ã¥N²zµ{¦¡«¬©MµL¥N²zµ{¦¡ªº½]®Ö§@·~¡C -
§Ö³t¡B¦Û°Ê¦a¶×¤J²£·~ªº®Ä¯àµû¶q
±qÅv«Â¾÷ºcªººô¯¸¤U¸ü´ú¸Õµ²ªG¡A¥i¼Æ¤ÀÄÁ¤º¨ú±o¸Ô²Óªº¦w¥þ«ü¤Þ¡A¥H½T»{±zªºªk³W¿í´`¦¨ªG¡A©Î¬O®Ú¾Ú¦w¥þªÀ¸sªº³Ì¨Î¹ê¬I§@ªk³]p±z±MÄݪº¤º³¡ºÞ²z¬Fµ¦ -
Continuous Audit Model »PºÞ¨îµøµ¡
¦w¥þ»P½]®Ö¹Î¶¤¥i¥H³]©wÂ^¨ú¸ê®ÆªºÀW²v¡A¨ú±o·Ç½Tªº¸ê®Æ¨Ó¤ä´©¦Û°Ê²£¥Íªº³øªí¡C ¬°¤FÁקK¤¤Â_ÃöÁ䪺°Ó·~À³¥Îµ{¦¡¡AIT Àç¹B¤Hû¥i¥H³z¹L¤@ÓºÞ¨îµøµ¡¡Aªý¾×¦bÃöÁä°Ó·~¶¥¬q®Éªº½]®Ö¸ê®ÆÂ^¨ú§@·~¡C -
¤ä´©«ü¥OÀɪº¥\¯à¥iÂX®i Policy Auditor ªº¯à¤O
²Õ´¤]¯à³z¹L¨t²Î¤ä´©ªº«ü¥O»y¨¥«Ø¥ß³W«h¡A§ó¶i¤@¨BÂX®i Policy Auditor ªº¯à¤O¡C ²³æªº«ü¥O»y¨¥¥]§t VBScript¡B§å¦¸ÀÉ¡BPerl ©M Python¡C