Symantec Control Compliance Suites data gathering functions, such as agentless reporting and database discovery, are designed to offer a comprehensive solution for IT control compliance reporting across disparate platforms, and to provide a cost-effective method for managing global IT risks. 
 
More than 4 000 customers worldwide currently have Symantec Control Compliance Suite components installed, relying on these automated tools to efficiently govern their IT compliance needs, by detecting drift from secure baselines, identifying accounts with blank passwords, and notifying the organisation when administrative accounts receive new members, the company says. 
 
Customers are offered auditing capabilities, with hundreds of ready-to-run reports using customisation options and flexible audit creation in each environment, to improve internal and external audits, Symantec adds.

IT administrators are able to be proactive in even the most resource-constrained environments by automating tasks enterprise-wide, the company says. This automated functionality helps to streamline compliance with such regulations, such as Sarbanes-Oxley, FISMA, or HIPAA, while dramatically reducing the costs of doing regular audits, the company adds.
 
As organisations continue to face stringent IT policy compliance requirements, Symantec is committed to helping customers define what they would like to be compliant to, control their IT environment to achieve compliance, and help them govern that compliance posture over time, says Arshad Matin, vice-president, compliance and security management, Symantec. 

Symantec Control Compliance Suite reduces costs associated with compliance by automating the management of deviations from technical standards and providing the ability to effectively remediate mis-configurations, he adds.
 
Tracking compliance to IT controls related to important regulations and frameworks, Symantec Control Compliance Suite aims to provide an efficient means to assess compliance to control systems based on custom mappings between technical standards and frameworks and regulations.