Compliance

Protect personal data and reduce your network risk profile. Here’s how:

• See devices that connect to your network and might contain personal data
• Segment networks containing sensitive devices
• Limit network access based on the device posture and your security policies

To acquire and maintain federal contracts with the Department of Defense, contractors must become and remain NIST 800-171 compliant. Accelerate compliance by:

• Gaining visibility into devices that connect to networks where Controlled Unclassified Information (CUI) is stored
• Using Forescout to prevent unauthorized access to devices and network segments containing CUI
• Utilizing Forescout’s experience working with NIST and 800-171 for over two years to address critical technical controls

Forescout is uniquely positioned to help address a set of requirements in eight of the 12 key categories of PCI DSS 3.2 mandates. For example, you can:

• Detect hosts without an antivirus program
• Restrict access to cardholder data on a need-to-know basis
• Monitor and detect wireless access points connected to the PCI network

IoT adoption is increasing network attack surfaces by opening up more entry points for stealing protected electronic health records. Forescout supports the HIPAA Administrative, Technical and Physical safeguards and can help you identify devices that enter or leave your network, providing you with the ability to control the access these devices should have to network resources and data.

Forescout unifies security management and supports a wide array of SWIFT CSP controls.
It enables a broad range of host controls and network access, allowing SWIFT customers to restrict access and quarantine noncompliant devices.

To comply with the NYDFS mandate, companies must:

• Continuously conduct full technology risk assessments
• Create and maintain an official cybersecurity program
• Ensure cybersecurity policy and procedures are documented, communicated and accessible

The Forescout platform simplifies NYDFS 500 compliance efforts by automating and accelerating device and network control, reducing overall risk and maintaining and demonstrating ongoing compliance.

Forescout supports FFIEC compliance by:

• Providing a single-pane-of-glass view of endpoint and network control posture across campus, data center, cloud and OT networks
• Addressing the need for access control, configuration control and protective control compliance
• Reducing the risk of data breaches and malware attacks by helping to ensure FFIEC controls are implemented completely and effectively at all times

HITRUST is a robust, yet complex framework that encompasses many popular standards and frameworks. By helping to enforce the HITRUST Cyber Security Framework, Forescout helps healthcare organizations to not only comply with HIPAA, but with NIST, PCI, GDPR, NYDFS 500 and other regulatory standards.