{"id":229307,"date":"2022-04-05T12:31:48","date_gmt":"2022-04-05T08:31:48","guid":{"rendered":"https:\/\/www.vladan.fr\/?p=229307"},"modified":"2022-04-05T12:31:48","modified_gmt":"2022-04-05T08:31:48","slug":"manage-your-security-and-compliance-globally-across-environments-and-geo-locations-via-runecast-platform","status":"publish","type":"post","link":"https:\/\/www.vladan.fr\/manage-your-security-and-compliance-globally-across-environments-and-geo-locations-via-runecast-platform\/","title":{"rendered":"Manage your Security and Compliance Globally Across Environments and Geo-locations via Runecast Platform"},"content":{"rendered":"
Runecast has grown again by providing global visibility enabling you to be able to achieve 100 % compliance within your enterprise. This can now be achieved with one unified platform. As enterprises have many geo locations and separate datacenters and remote offices across the globe. The management of such an environment with separate and siloed software isn't usually the best you want. Ideally, a single pane of glass is what's kind of a holy grail for IT admins. Runecast's latest platform update does just that!<\/p>\n
Until now, there was not a possibility within the Runecast<\/a> platform, to have multiple teams (SecOps, Compliance, IT infrastructure, DevOpes)\u00a0 each managing security, infrastructure health, or compliance within a different geographical location. This is a new feature in Runecast 6.1 called Organizations<\/strong>, which is particularly useful when your company has many offices around the world and you want to avoid siloed reporting and management.<\/p>\n You can grant access to your teams based on their geo-location to be able to manage the infrastructure that they are responsible for. You can actually replicate your existing company structure now. Runecast has integration to Microsoft AD or LDAP so your team will see only what they need to see (previously, all teams saw everything) depending on the permissions they are assigned to or depending on the level of their role.<\/p>\n From other innovations, we can mention KEV correlation<\/strong> which stands for Known Exploited Vulneratilibies<\/strong> (KEV). This is a catalog that contains common vulnerabilities. The mission of the CVE program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. In fact, it is CISA (Cybersecurity & Infrastructure Security Agency) in the USA that maintains the KEV catalog which is a very useful tool to fight against cyberattacks.<\/p>\n While it is clear that military and government organizations have to be compliant, there is due date in the KEV catalog and for those organizations it is mandatory. For others, they can still use it as a guide and be patched and fully protected. KEV can be used with DISA STIG (Defence Information Systems Agency) (Security Technical Implementation Guides) <\/strong>and use it for example for closing remote access ports or removing factory defaults admin passwords.<\/p>\n Runecast platform brings also more security profiles that can be applied to the OS level now (DISA STIG profile) and vSphere can now be evaluated against GDPR.\u00a0Overall, there are also improved views allowing you to filter, inspect and resolve all reported issues.<\/p>\n The Runecast platform provides configuration, best practices, vulnerability, and security compliance across your global estate. Your teams located across the globe have all the required information to proactively secure your infrastructure and maintain uptime.<\/p>\n Quote from Runecast:<\/strong><\/p>\n Servers and appliances which are physically located in separate regions and controlled by different Operations teams can now be put in different Organizations in the Runecast interface, saving your teams time while bringing better operational transparency.<\/p><\/blockquote>\n Screenshot from Runecast<\/p>\n Here is a list of compliance standards that the Runecats platform supports right now (growing):<\/p>\n Screenshot from Runecast<\/p>\n This is not Runecast we knew just a couple of years ago. This Runecast is bigger, richer, more global, and more open to a global scale. Runecast has really evolved to become a Security product platform with a possibility of security audit and compliance, as well as keeping your IT infrastructure up-to-date with the best performance and optimization. Runecast has the possibility to manage Kubernetes as well since many organizations taking advantage of modern apps. Kubernetes Security Posture Management (KSPM) software allows you to audit those workloads and have the latest security and vulnerabilities remediation options.<\/p>\n Runecast is becoming really multi-platform security and compliance tool that progressed enormously. It's now a tool that can be used not only by IT admins but also by security teams, CIOs or CISOs. We're evolving into an IT environment where an IT admin with several “hats” has clearly more and more work because of security and compliance. While just a couple of years ago, being an IT admin the job of security and compliance could be done by a single man in small organizations, this becomes more and more difficult today.<\/p>\n Larger IT departments can use single software for the company's security, compliance, best practices, patches, and (or) remediations, for all their multi-cloud and multi-site environment, via a single appliance.<\/p>\n Discover, manage, audit, and remediate across different platforms via a Single Pane of Glass. Runecast platform covers not only on-prem environments with vSphere, different OS types, Horizon, NSX-T, VSAN, Kubernetes, but also public and private clouds such as vCloud Director, AWS, or Azure.<\/p>\n Tight integration with VMware vSphere<\/p>\n Source: Runecast<\/a><\/p>\n Stay tuned through\u00a0RSS<\/a>, and social media channels (Twitter<\/a>,\u00a0FB<\/a>,\u00a0YouTube<\/a>)<\/p>\n\n\n<\/a><\/p>\n
Runecast is becoming a Single Pane of Glass for security and compliance<\/h3>\n
\n
<\/a>BSI IT-Grundschutz<\/li>\n
Runecast 6.1 New Features<\/h3>\n
\n
<\/a><\/p>\n
Final Words<\/h3>\n
<\/a><\/p>\n
Some of our Previous posts about the Runecast platform:<\/h3>\n
\n
More posts from ESX Virtualization:<\/h3>\n
\n