Products
Learn more about STREAM - the comprehensive risk and
compliance management solution
Solutions
Learn about the different ways STREAM is used
Industries
Find out which industries benefit from using STREAM
Resources
Want to download a datasheet? Go to our resources page
Contact Us
Use our enquiry form to contact us
News: Support for Security Policy Framework Announced
Acuity announces support on STREAM for UK Government’s new security policy framework, launched in December 2008.
The result: UK Departments and Agencies will be able to deploy a compliance management solution with the SPF minimum mandatory requirements already configured in, off the shelf, with very short configuration and implementation times.
The UK Government’s new Security Policy Framework (SPF) adopts a four-tiered approach around:
-
Business goals
-
Key security principles
-
Key policy documents
-
Detailed technical standards
The SPF specifies 70 minimum mandatory requirements but emphasises that these are minimum requirements and that many Departments and Agencies will manage their specific security risks over and above these baseline measures using sound risk management principles, including a detailed risk register.
Commenting on this launch, Acuity’s Managing Director, Simon Marvell said, “The Security Policy Framework provides for a risk managed approach to compliance with policy and standards in support of Department’s business goals. We are delighted to be able to announce a portfolio of products that align so closely to the requirements of the framework”.
We've produced a new datasheet called STREAM for Security Policy Framework, available from our Resources page.
The Security Policy Framework is supported by these members of the STREAM product family:
STREAM Compliance Manager
Measure and report Enterprise-wide on compliance with the SPF minimum mandatory requirements, relevant public standards such as ISO 27001 and BS 25999, detailed technical standards and Department’s own internal standards.
STREAM Risk Registers
Meet the SPF requirement for security risk registers. Create and maintain a series of Enterprise-wide security risk registers with aggregation-up for management views and drill-down for detailed analysis.
STREAM Integrated Risk Manager
Provide seamless compliance, risk and performance management. Track residual risk status against risk appetite and key security performance metrics. Monitor compliance levels and identify where critical non-compliances are resulting in unacceptable business risk.
Date added: 29-01-09
Register for email news
Latest
-
Success story - UK Department for Education
The Department for Education uses STREAM to support its ISO 27001 compliance programme and reporting against the Information Assurance Maturity Model.
-
Information Security Europe 2010
Significant interest was expressed in the STREAM suite of products at Information Security 2010. It is clear that comprehensive risk and compliance management is becoming a key requirement for public and private organisations.
-
STREAM Seminar - Ljubljana May 2010
Richard Mayall presented a workshop in Ljubljana, Slovenia on 20 May 2010 on 'A better way to manage all your risks'. The workshop considered how STREAM can automate assurance management systems and support standards compliance.
