ISO 17799 is a detailed security standard and a comprehensive set of controls comprising best practices in information security. Organizations that achieve ISO 17799 certification not only prove their commitment to secure operations, they also significantly improve risk management. ISO 17790 is organized into 10 sections that describe best practices for Business Continuity Planning, System Access Control, System Development and Maintenance, Physical and Environmental Security, Compliance, Personnel Security, Security Organization, Computer and Operations Management, Asset Classification and Control, and Security Policies. Tripwire change auditing solutions form the foundation of best practices management for your IT operations.

An Ironclad Defense: Detective Control

Tripwire provides what auditors call a detective control. It delivers the hard evidence of IT configuration audit and control that auditors want. Tripwire gives you:

• Automated configuration control that isn't susceptible to human error or lapses in judgment
• Broad infrastructure coverage of changes on servers, workstations and network devices, including changes made both manually or by automated tools
• Independent evidence of change through perfect segregation of duties - the person or tool that made the change is not used to validate the change