[BESAdmin-Announcements] Tivoli Endpoint Manager for Security and Compliance Analytics 1.0 (pka DSS SCM) is now available!

[Announcements for BES Administrators]

Dear BESAdmin Community,

We're pleased to announce the general availability of Tivoli Endpoint
Manager for Security and Compliance Analytics 1.0 (pka DSS SCM)! All
customers currently licensed for Tivoli Endpoint Manager for Security and
Compliance, BigFix SCVM, or BigFix SCM v3 are entitled to this component.


ABOUT TIVOLI ENDPOINT MANAGER FOR SECURITY AND COMPLIANCE ANALYTICS

Tivoli Endpoint Manager for Security and Compliance Analytics (SCA) is a
web-based application for endpoint security and risk assessment. The system
archives endpoint security compliance check results to help identify
configuration issues and report levels of compliance toward security
configuration goals. SCA is a component of Tivoli Endpoint Manager for
Security and Compliance, which includes libraries of technical checks (aka
controls) and tools based on industry best practices and standards for
endpoint and server security configuration. The technical checks enable
continuous, automated detection and remediation of security configuration
issues. Note that certain SCM checklists provided by IBM are designed to
work with the SCA reporting. You may have a range of “legacy” BigFix
fixlets, Tivoli Endpoint Manager fixlets, and custom fixlets for security
compliance in your deployment. These will continue to function correctly,
however, only certain fixlets will appear within the SCA reports.

Report views and tools for managing the SCM checks are provided by SCA. SCA
generates the following reports, which can be filtered, sorted, grouped,
customized using any set of Tivoli Endpoint Manager properties, and
exported:
      Overviews of Compliance: Status and History
      Checklists: Compliance, Status, and History
      Checks: Compliance, Status, Values, and History
      Computers: Compliance, Status, Values, and History
      Computer Groups: Compliance, Status, and History
      Exceptions: Management, Status, and History

More information about the SCM technical checks and the SCA reporting
component is available in the Security Configuration Management
documentation on our support website at
http://support.bigfix.com/resources.html.


NEW DISA STIG FOR WINDOWS SCM CONTENT ALSO NOW AVAILABLE

In addition to the new SCA component, a new set of DISA STIG content sites
for Windows is available. This content, replacing the previous DISA STIG
for Windows sites, is based on the latest guidance from DISA. The new
content is compatible with SCA 1.0, contains measured values analysis
properties, and uses a new model for check parameterization. The new sites
are:
      DISA STIG on Windows 2008 DC v6r1.11
      DISA STIG on Windows 2008 MS v6r1.11
      DISA STIG on Windows 2003 DC v6r1.18
      DISA STIG on Windows 2003 MS v6r1.18
      DISA STIG on Windows Vista v6r1.18
      DISA STIG on Windows XP v6r1.18
      DISA STIG on Windows 7 v1r2


HOW TO GET TIVOLI ENDPOINT MANAGER FOR SECURITY AND COMPLIANCE ANALYTICS
and the NEW DISA STIG FOR WINDOWS CONTENT

If you are running BES 8.0 or Tivoli Endpoint Manager 8.1 or later and your
server is gathering the SCM Reporting site, a new Security and Compliance
Analytics dashboard is available in the Security Configuration domain with
a utility to download and install the new Analytics software. Also, the new
DISA STIG Windows sites will appear in your License Overview dashboard in
the BigFix Management domain.

If you are running BES 7.x and you are currently licensed for Tivoli
Endpoint Manager for Security and Compliance, BigFix SCVM, or BigFix SCM
v3, please contact ibmtemlicensing at lotus.com for access to the new
component and new DISA STIG for Windows mastheads.


We hope you have a chance to evaluate and adopt this exciting new product
from IBM and the Tivoli Endpoint Manager (built on BigFix technology) team.

Thank you!

  -- The IBM Tivoli Endpoint Manager Product Team