12 – Operations Security

In the Reports Portal, select Repository > Standard Content > Data Compliance Content > Sarbanes Oxley > ISO 27002 > Dashboards or Reports > ISO 12 Operations Security.

To assess your enterprise's compliance with this requirement, use the following dashboards and reports:

Dashboards	Reports
Administrative Login Overview Application Vulnerabilities Overview Failed Login Overview Failed Login Relationship Firewall Configuration Changes Malware Overview Successful Login Overview Unpatched Systems Vulnerability Overview	Antivirus Stopped or Paused Audit Log Cleared Database Configuration Changes Database Vulnerabilities Failed Administrative Login Summary Failed Antivirus Updates Failed Login by SOX Asset Failed Login Summary Firewall Configuration Changes High Risk Vulnerabilities Malware Summary Network Device Configuration Changes Overflow Vulnerabilities SQL Injection Vulnerabilities Successful Administrative Login Summary Successful Login by SOX Asset Unpatched Systems Vulnerability Summary by CVE ID Vulnerability Summary by SOX Asset Vulnerability Summary on SOX Environment XSRF Vulnerabilities XSS Vulnerabilities

Administrative Login Overview

Provides an overview of administrative login activity, relevant to ISO 27002:2013 Control 12.4.3.

To define administrative accounts, use the worksheet condition of this dashboard. Use lowercase to define the accounts. For example, add the user "Administrator" as "administrator."

Application Vulnerabilities Overview

Provides an overview of the following application vulnerabilities, relevant to ISO 27002:2013 Control 12.6.1:

• SQL injection

• XSS

• XSRF

• Overflow

Failed Login Overview

Provides an overview of failed login activity, relevant to ISO 27002:2013 Control 12.4.1.

Failed Login Relationship

Based on ArcSight categorization, provides an overview of failed login relationships involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.4.1.

Firewall Configuration Changes

Provides an overview of firewall configuration change events, relevant to ISO 27002:2013 Control 12.1.2.

Malware Overview

Provides an overview of malware activity, relevant to ISO 27002:2013 Control 12.2.1.

Successful Login Overview

Provides an overview of successful login activity, relevant to ISO 27002:2013 Control 12.4.1.

Unpatched Systems

Provides an overview of missing security patches on Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.5.1.

Vulnerability Overview

Provides an overview of vulnerability events involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.6.1.

Antivirus Stopped or Paused

Provides a summary of antivirus services that were stopped or paused, relevant to ISO 27002:20213 Control 12.4.1.

Audit Log Cleared

Provides a summary of audit log cleared events involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.4.2.

Database Configuration Changes

Provides a summary of database configuration changes, relevant to ISO 27002:2013 Control 12.1.2.

Database Vulnerabilities

Provides a summary of database vulnerabilities involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.6.1.

Failed Administrative Login Summary

Provides a summary of failed administrative login events involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.4.3.

To define administrative accounts, use the worksheet condition of this dashboard. Use lowercase to define the accounts. For example, add the user "Administrator" as "administrator."

Failed Antivirus Updates

Provides a summary of failed antivirus updates, relevant to ISO 27002:20213 Control 12.4.1.

Failed Login by SOX Asset

Provides a summary of failed logins detected on specific SOX assets , relevant to ISO 27002:2013 control 12.4.1.

When you run this report, specify the asset (host name, IP address, or MAC address) in lowercase.

Failed Login Summary

Provides a summary of failed login events involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.4.1.

Firewall Configuration Changes

Provides a summary of firewall configuration change events, relevant to ISO 27002:2013 Control 12.1.2.

High Risk Vulnerabilities

Provides a summary of high-risk vulnerabilities involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.6.1.

Malware Summary

Provides a summary of malware events on Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.2.1.

Network Device Configuration Changes

Provides a summary of network device configuration change events involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.1.2.

Overflow Vulnerabilities

Provides a summary of overflow vulnerabilities involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.6.1.

SQL Injection Vulnerabilities

Provides a summary of SQL vulnerabilities involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.6.1.

Successful Administrative Login Summary

Provides a summary of successful administrative login events involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.4.3.

To define administrative accounts, use the worksheet condition of this dashboard. Use lowercase to define the accounts. For example, add the user "Administrator" as "administrator."

Successful Login by SOX Asset

Provides a summary of successful logins detected on specific SOX assets, relevant to ISO 27002:2013 control 12.4.1.

When you run this report, specify the asset (host name, IP address, or MAC address) in lowercase.

Unpatched Systems

Provides a summary of missing security patches involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.5.1.

Vulnerability Summary by CVE ID

Provides a summary of vulnerabilities detected on SOX environments by specific CVE ID, relevant to ISO 2700:2013 Control 12.6.1.

When you run this report, specify the CVE ID in lowercase.

Vulnerability Summary by SOX Asset

Provides a summary of vulnerabilities detected on specific SOX assets, relevant to ISO 27002:2013 Control 12.6.1.

When you run this report, specify the asset (host name, IP address, or MAC address) in lowercase.

Vulnerability Summary on SOX Environment

Provides a summary of vulnerabilities involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.6.1.

XSRF Vulnerabilities

Provides a summary of XSRF vulnerabilities involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.6.1.

XSS Vulnerabilities

Provides a summary of XSS vulnerabilities involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 12.6.1.