Securing desktops/workstations and servers is essential, but at the same time it is a complicated, time consuming and expensive task. Staying current with system settings and patch update recommendations is challenging and time consuming. SecurityExpressions can solve these problems by providing a simple and straightforward way to audit against and comply with system security policies. SecurityExpressions comes with pre-defined system security policy files and security guidelines from well-known sources, such as SANS, CIS, NSA, NIST, Microsoft, IBM and others.

From a central console, you can audit, assess and comply with the system security policy:

• Audit against industry best practices

• Edit policies to include specific corporate requirements

• Create policies from scratch for any requirement

• Report status against the policy for risk assessment

• Use a benchmark score to provide a single measurement of audit compliance status

• Automate audit and reporting tasks to a schedule and notify and report when complete

SecurityExpressions system security policy files are expression based rules that allow for if-then-else scenarios and provide tremendous flexibility to achieve any task. Rules can be written simply or can be extremely comprehensive depending on the system security requirements of the organization or the individual using the system.

Complete Audit
Complete audit results are stored in any ODBC compliant database or flat file format for historical viewing and importing into databases and spreadsheets. This means that results are stored until they are deleted and are available weeks, months or years after the audit is performed.

Audits provide an efficient, effective, and low cost method for assessing a machine's status compared to well known guidelines and for applying those guidelines. Using the benchmark score, compliance status can be communicated a single measurement.

Undo Changes and Settings
When applying a setting, SecurityExpressions records any change it makes into a log file. Logged changes not only provide an audit trail, but also allow SecurityExpressions to restore settings to their previous values. This ensures that if a system change is implemented in error or did not produce the desired result, it can be reversed. This function can be implemented for an individual setting or group of settings and on a single system or an entire network.