Apr 10 -- EMC Corp., a provider of information infrastructure solutions, announced Monday availability of a new integrated solution aimed at bridging the IT and security operations functions in support of improved compliance, risk management and cost control. The solution is based on EMC's Voyence Control product for Network Change and Configuration Management (NCCM) and the RSA enVision product for Security Information and Event Management (SIEM).

EMC of Hopkinton, Massachusetts develops and provides information infrastructure technology and solutions that enable organizations of all sizes to transform the way they compete and create value from their information.

For the IT operations professional, the new solution is designed to provide the means to define and enforce configuration security standards and to automatically conduct compliance tests on a regular basis. Successfully automating these policies along with standardized network configuration management ensures data is available and secure would eliminate business risk from non-compliant devices. This would result in fewer service outages and reduced costs associated with Service Level Agreement (SLA) penalties and trouble ticket processing.

For the security operations professional, the solution is engineered to provide three major benefits, including ensuring that network assets are configured to forward all log events to enVision, which is the cornerstone of compliance reporting using SIEM solutions. The solution also immediately detects changes to network asset configurations and sends such changes to enVision to evaluate potential security risks associated with those changes. The new solution also for those changes deemed inappropriate invokes a workflow-enabled process, closes the loop and remediates the configuration to a secure and compliant state and actively configuring the device as required.

"Whether you're looking at it from an IT operations or security operations perspective, today's announcement is really a win-win for all our customers," said Chris Gahagan, EMC's Senior Vice President, Resource Management Software. "For both audiences, the integrated solution addresses the shared challenge of cost-effective IT service delivery. This includes ensuring the flow of necessary information between disparate work teams and the availability of expanded information to quickly drive reliable decision-making."

John Worrall, Vice President and General Manager of RSA's Information & Event Management Group said, "With the blizzard of log events in a customer enterprise, security vulnerabilities that arise from misconfigured IT systems are difficult to detect and remediate. This integrated solution is designed to give IT operations and security operations teams a more complete and efficient way to demonstrate compliance and manage security risks."

The joint solution is being exhibited at the RSA Conference 2008 in San Francisco. RSA's information risk management solutions, services and partners will be featured in Booths #1717 and 1817 at RSA Conference 2008, April 7-11, 2008, at the Moscone Center in San Francisco.