Effective Detective

Change audit software and services provider Tripwire (Portland, Ore.) released version 5.0 of its Tripwire Enterprise change audit solution, which is designed to prove system and process integrity to help companies comply with regulations while achieving greater network availability and security. Version 5.0 automatically detects changes across both servers and network devices independent of who made the change, or why, and enables actual production changes to be reconciled with intended and authorized changes, according to the vendor. "Tripwire Enterprise delivers single point control for auditing changes across distributed infrastructures, enabling organizations to build confidence in change management and security processes, demonstrate compliance and, ultimately, increase network availability," says Rob Warmack, senior director of marketing at Tripwire.

Tripwire claims its offering presents an advantage over change and configuration management tools that automate either change approval workflow or the deployment and administration of software and system configurations. Such solutions operate on the mistaken assumption that by automating the way change is authorized and implemented, human error and business risk is reduced, the vendor contends. However, without the enforcement of a detective control, even the best change-management processes are easily circumvented or simply ignored, according to Tripwire.

Anthony O'Donnell has covered technology in the insurance industry since 2000, when he joined the editorial staff of Insurance & Technology. As an editor and reporter for I&T and the InformationWeek Financial Services of TechWeb he has written on all areas of information ... View Full Bio