Consul Delivers Superior Log Management and Investigation Capabilities, Ensuring Policy and Regulatory Compliance; InSight Suite 7.0 Continuously Audits, Monitors and Reports on Privileged User Behavior.

HERNDON, Va. -- Consul risk management, the authority in security audit and compliance, today unveiled Consul InSight(TM) Suite 7.0. Focusing on privileged administrators, outsourcers and other power users, the new version was borne out of customer demand for ubiquitous log collection as a baseline for auditing, monitoring and reporting on privileged user activity. InSight Suite includes innovative Google-like search and query capabilities for authoritative investigation. Consul's latest solution offers organizations continuous, non-intrusive assurance, and documentary evidence, that their most trusted users are managing systems and data in accordance with company and regulatory policies.

Why is Log Management and Investigation a Critical Part of Information Systems Assurance?

Almost 90% of internal security incidents are attributed to privileged administrators, outsourcers and power users, who can accidentally or deliberately damage IT systems or release confidential data assets. These actions may result in costly outages, lost business, lost customers, legal liability and/or audit deficiencies. Since privileged users require full access rights to systems and data, any controls imposed on them must not impede their daily work. Until now, there have been no effective solutions for unobtrusively monitoring and managing these power users to ensure they are complying with essential company and regulatory policies.

"We were overwhelmed with the number of log files that had to be processed on a daily basis," said Jim Carter, director of IT security for Jackson National Life Insurance Company. "Having to manually analyze logs created a strain on our resources. Consul InSight automates the process and allows my team to review reports several times a day and flag areas where we should delve deeper."

"Compliance requires the ability to document the effectiveness of control within the organization, as well as defenses against external exploits," said Scott Crawford, CISSP, ISSAP, ISSMP, senior analyst and security practice leader at Enterprise Management Associates. "The complement of functionality delivered in the InSight Suite 7.0 can satisfy requirements in any of several domains of IT risk information and event management, whether high-end security or investigative analytics, real-time internal monitoring and reporting for compliance, or log management that combines essential functionality with Consul's well-informed compliance experience. As a whole, the suite recognizes that risk management is not purely a security or a compliance problem--it is a business problem for which IT needs a solution that can be adapted to what's best in each specific customer case."

Features of the Consul InSight Suite 7.0

The Consul InSight Suite is an automated solution to capture logs, monitor, investigate and report on the activities of users across the enterprise, and to provide audit evidence that the organization has established controls as required by policy and regulations. At the core of the new InSight Suite is a Log Management layer which gathers log and audit trail information from across the enterprise to store, query and retrieve, in Google-like fashion, information as needed for compliance and investigation.

Consul InSight Suite 7.0 offers:

Log Collection

High-performance, secure, reliable collection - InSight's scalable Log Manager conducts reliable, verifiable collection of native log data in real-time.

Ubiquitous event support - InSight collects events from virtually any platform. This ensures that the data is collected and stored for later analysis, investigation or retrieval for audit and compliance purposes.

Centralized log management repository - InSight's scalable Log Manager supports a centralized log repository that consolidates the collection results, allowing personnel to review log continuity and history to ensure that the organization meets regulatory and company requirements for continuous log data collection.

Log Investigation

Log verification dashboard - InSight's Log Manager provides administrators with specific information and reports to enable them to verify that collects are occurring on schedule and to diagnose problems when they occur.

Google-like search of original logs - InSight's Log Manager provides powerful search and reporting tools that will allow a query to be run against all log data and across InSight servers.

Query ranking summary - Log Manager's Query ranking summary rates the granularity of the results, saving time and providing greater focus on more relevant results or enabling greater refinement of search criteria.

Activity trends summary - Activity anomalies are easier to investigate with Log Manager's Activity Grouping, meaning that increases in areas such as network traffic are quickly identified for operations and security personnel follow-up.

"Regulators and auditors have a zero-tolerance policy for privileged user risk," said Joe Sander, CEO of Consul risk management. "The InSight Suite offers a single portal for all of Consul's security audit and compliance products and a direct view into an organization's state of collection compliance and log continuity. Log management has become a must-have tool for auditing. Through the InSight Suite, Consul is helping organizations increase functionality and business process improvement, while lowering the cost of compliance."

About Consul risk management, Inc.

Founded in 1986, Consul risk management is an authority in security audit and compliance. Consul provides policy-based user monitoring solutions to track, report on and investigate non-compliant behavior, such as unauthorized activity by administrators and other privileged users. The Consul InSight(TM) Suite automates the process of enterprise-wide log collection, privileged user monitoring, behavioral forensics and compliance reporting.

More than 350 customers around the world rely on Consul to accelerate their security audit and compliance efforts, including AEGON Canada, Blue Cross/Blue Shield, Fidelity Financial Services, Ford, Kroger, The New York Times, Office Depot, Philadelphia Stock Exchange, Wachovia and government agencies. Consul has offices in the United States and the Netherlands, and 25 partners worldwide, including BMC Software. For additional information about Consul and its products, services and partners please call +1 800.258.5077 or +31 15.251.3333 (Worldwide), or visit www.consul.com.

Consul InSight Suite, Consul InSight, Consul InSight Security Manager are trademarks of Consul risk management, Inc.