Free TrialEnacted in response to multiple corporate accounting scandals, the Sarbanes Oxley Act (SOX) (also known as the Public Company Accounting Reform and Investor Protection Act) safeguards investors from fraudulent activities involving internal employees. Heavy penalties and stringent regulatory standards are imposed to ensure all the financial information processed by an organization is genuine and reliable.
DataSecurity Plus is an audit tool that delivers the visibility required to monitor and track the validity of all financial information in an organization. DataSecurity Plus' various reports can help you manage the difficult task of proving compliance while ensuring the security of your financial data.
Below is a list of reports you can use to prove that your organization is compliant with the SOX.
| SOX standards | DataSecurity Plus report or alert |
| Track all modifications to files in order to assess risks to data integrity and resolve violations, if any. | All file/folder changes report |
| Deleted/overwritten files report | |
| Security permission changes report | |
| Most modified file report | |
| Create events report | |
| Renamed/moved events report | |
| Files modified after N days report | |
| Periodically review all attempts to access critical data, including both successful and failed attempts. | All failed attempts report |
| Read events report | |
| Most accessed file report | |
| Most accesses by processes/user report | |
| Files accessed after N days report | |
| Review access rights and file permissions periodically to ensure that no excessive permissions are assigned beyond what is needed. | NTFS permissions report |
| Share permissions report | |
| Utilize customizable alerts to enable timely detection of any user actions that violate your data protection policies. | File/folder moved or renamed alert |
| File/folder security changes alert | |
| File/folder removed alert | |
| Media files alert | |
| Use preconfigured alerts to detect and respond quickly to potential data breaches. | Ransomware file alert |
| Threshold-based alert |
* You can also generate customized reports based on file path, users, business hours, etc.
 |
Audit and analyze file and folder access |
 |
Analyze files and disk space |
|
| The Access Audit report provides detailed information on the quintessential Four W's—who accessed what, when, and from where. This will help you keep track of all accesses and changes. The Access Analysis report provides a summary view of accesses and changes, which can help you detect access trends. | The File Analysis report helps isolate files that are old, unused, unmodified, large, hidden, or non-business; making data cleanup easier. The Disk Analysis report provides visual insight into disk space usage and trends, facilitating optimization of disk space; it also reveals properties of files and folders. | |||
 |
Actively respond to security breaches |
 |
Audit access rights |
|
| Detect security breaches as and when they occur with alerts that get emailed instantly. Define threshold limits for mass access events such as malware attacks. | Examine share and security permissions of files and folders and prevent access exploitation. | |||
 |
Minimize incident response times |
|||
| Become proactive with real-time file and folder access and change auditing. Continuously monitor and get notified about critical activities. | ||||
Disclaimer: Fully complying with the SOX requires a variety of solutions, processes, people, and technologies. This page is provided for informational purpose only and should not be considered as legal advice for SOX compliance. ManageEngine makes no warranties, express, implied, or statutory, as to the information in this material.
