6 – Organization of Information Security

In the Reports Portal, select Repository > Standard Content > Data Compliance Content > Sarbanes Oxley > ISO 27002 > Dashboards or Reports > ISO 6 Organization of Information Security.

To assess your enterprise's compliance with this requirement, use the following dashboards and reports:

Dashboards	Reports
VPN Connection Overview Wireless Attacks and Suspicious Activity	Outbound Communication from Development to Production Environment Outbound Communication from Production to Development Environment VPN Connection Summary Wireless Attacks and Suspicious Activity

VPN Connection Overview

Provides an overview of VPN connection activity involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 6.2.2.

Before using this dashboard, ensure that variables isAgentZoneSOX and isAgentAddressSOX are defined in the SOX logical model. For more information, see the Solutions Guide for ArcSight Insight Compliance Package for SOX.

Wireless Attacks and Suspicious Activity

Provides an overview of wireless attacks and suspicious activity involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 6.2.1.

Outbound Communication from Development to Production Environment

Provides a summary of outbound communication events from development to production environments involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 6.1.2.

Before using this report, ensure that variables isSourceZoneSOXDevelopment and isDestinationZoneSOXProduction are defined in the SOX logical model. For more information, see the Solutions Guide for ArcSight Insight Compliance Package for SOX.

Outbound Communication from Production to Development Environment

Provides a summary of outbound communication events from production to development environments involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 6.1.2.

Before using this report, ensure that variables isSourceZoneSOXProduction and isDestinationZoneSOXDevelopment are defined in the SOX logical model. For more information, see the Solutions Guide for ArcSight Insight Compliance Package for SOX.

VPN Connection Summary

Provides a summary about VPN connection events which involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 6.2.2.

Before using this report, ensure that variables isAgentZoneSOX and isAgentAddressSOX are defined in the SOX logical model. For more information, see the Solutions Guide for ArcSight Insight Compliance Package for SOX.

Wireless Attacks and Suspicious Activity

Provides a summary of wireless attack and suspicious activity events involving Sarbanes Oxley systems, relevant to ISO 27002:2013 Control 6.2.1.