Greenpapers

Welcome to the new generation of environmentally friendly information!
OpenService has gone green.

That's right, we have done away with white papers that traditionally harm our environment.

"No trees were harmed in the creation of these papers."

The Open Advantages of OpenService - NEW!
You wouldn’t deposit money in a bank that prohibits withdrawals or transfers. So why would you allow a closed event management system to lock away your event data in a proprietary format that only its tools can access?

Achieving HIPAA Compliance with the InfoCenter Suite from OpenService
April 2005 saw the first deadline for full compliance with the HIPAA security rules. Read how OpenService's solutions help you quickly meet these complex requirements.

NerveCenter Service Management Concepts
Most IT organizations already have devices and applications capable of generating the data necessary to achieve service management. NerveCenter supplies the missing piece needed to analyze that data and organize it according to the way your services use underlying IT components.

Service Assurance Buyer's Guide: How to Evaluate Network Management Systems
As small businesses become mid-sized, they face the same network and service challenges of larger enterprises but with fewer resources to cope with them. This guide suggests a framework to evaluate and compare popular network management tools designed to help organizations assure mission-critical network services.

When IT is the very lifeblood of your company
With the explosion of eCommerce in the late 1990s, businesses came to recognize that computing had become the very lifeblood of their businesses. Businesses base communications, marketing, procurement, fulfillment, operations, and even financial trading on the ubiquitous and unblinking computing infrastructure.

Risk Based Correlation vs. Rule Based Correlation
Risk based systems focus mainly on the assets and their position in the network topology. As new threats emerge, the assets remain constant and no system tuning or additional programming is required. Instead, signature updates are received by the system so that new threats can be incorporated into risk calculations.

Addressing Sarbanes-Oxley Security Monitoring Compliance
Sarbanes-Oxley (SOX) deadlines are fast approaching. Read how to comply with the monitoring and log analysis requirements that section 404 of the Act mandates.

Security Information and Event Management Vendor Selection Tips
The security information management (SIM) market is crowded, and it can be difficult to differentiate between solutions. Read these tips to help guide you through your process.

Real-time Enterprise Risk and Vulnerability Management
This paper shows why and how to turn batch vulnerability and patch management systems into comprehensive real-time security information management, delivering effective real-time triage to make your security operations more efficient and more effective.

Correlate This! Why Perimeter Security Alone is Not Enough
Or, It's Hard to Survive the Data Deluge from IDS and Other Tragedies of Modern Security Threat Management. Having security devices in place to manage threats is a good first step towards establishing a deep and secure IT infrastructure, but it isn't nearly enough.

False Positive Thinking: Handling the IDS Data Deluge
Unlike their network management peers, security teams have little control over the kinds of threats they will face on a daily basis. And it's only getting worse: threat volumes are rising, the number of known vulnerabilities grows daily, yet the more security technology that is deployed generates even more data, compounding the problem further. This white paper discusses strategies to handle security alert data volumes successfully.

Smooth Operators: The Role of Service Level Management in the SOC
A discussion of the role Service Level Management (SLM) can have in a security context. Indeed, for many staffers focused on responding to alarms, SLM may be an arcane or unknown concept. Read how to apply it to your security operation.

Using Security Information Management to Support Corporate Compliance
Read how real-time security event management, log analysis and consolidation are an essential part of complying with regulations such as HIPAA, FISMA, GLBA and ISO 17799/BS 7799. This paper focuses on ISO 17799/BS 7799 as generic examples of using SIM for compliance purposes.

Real-Time Threat Correlation White Paper
In order for security threats to be detected and identified before a compromise occurs, all event data from security, server and network systems must be collected, correlated, and analyzed in near real-time. These events may be in differing formats, from different platforms or applications, and may even be about different types of symptoms (faults, security, performance, etc.), but when viewed as a set of related events, pinpoint a particular threat. This white paper describes technology can make sense of this data.

Patch Management: Necessary but Not Sufficient for Effective Enterprise Security
The window between vulnerability and successful exploit is now being measured in days—often outpacing the ability for enterprises to patch all susceptible machines. Find out how to augment your patch and vulnerability management procedures with real-time monitoring and vulnerability correlation to close the door on viruses, worms and other malware.