Risk Assessment

In the current economic climate the ability to assess the risk to any corporate IT environment, from both external and internal threat, has become increasingly important as security breaches can cost organisations dearly with legislation levying hefty fines and negative publicity, impacting on both share price and brand image. Northdoor has identified Skyview's Risk Assessor as a key product which has been incorporated into Northdoor's Risk Assessment solution.

The SkyView Risk Assessor is a security diagnostic tool for the IBM System i (iSeries/AS400), which provides a complete vulnerability assessment that measures over 100 risk points against security best practices. Designed by iSeries expert Carol Woodbury this tool will save you a tremendous amount of time. 

A comprehensive diagnosis is often overlooked when it comes to the security configuration of OS/400. Most system administrators only have the time to manage passwords and monitor a few system values. But when it comes to security, the task extends beyond passwords and system values. Part of the problem in doing a comprehensive diagnosis of the security of OS/400 is determining all of the areas that need to be analyzed and the method by which the analysis is completed.That’s where the expertise of Carol Woodbury, former Chief Architect for OS/400Security at IBM becomes not only valuable, but necessary! But more than that, to do a comprehensive diagnosis of the security of OS/400, you have to have the time and resources available to do it.

With Risk Assessor you get an automated tool that normally completes the job in about the time it takes you to go to lunch! The net result with Risk Assessor is that you get a comprehensive report regarding the security configuration for OS/400. The report includes details about the issues discovered, explanations about the business risk the issue presents, and ways to start addressing the issues it finds. Risk Assessor can provide a uniquely unbiased, third-party evaluation of the OS/400 security of each OS/400 logical partition on which it is run. The objective report can be used as a discussion document with auditors and your senior management.

In addition, Risk Assessor provides a comprehensive document that tells you;

* WHY an issue it found was raised as a security concern,
* WHAT things you need to consider before making any changes, and
* HOW you could approach “fixing” the issues that are found.

Risk Assessor is repeatable. You can run Risk Assessor on a periodic basis to ensure you know how your current configuration compares with best practices. Also, as you remediate issues, Risk Assessor's documentation provides auditors with a documented progress report. 

For more information on Policy Minder and how Northdoor can help you please contact us by clicking here, or browse through the following material:

Why do a risk assessment?