Technical Note: ZoneFox 4.0 - How can I use ZoneFox to help with compliance support for standards and frameworks (HIPAA, PCI, etc.)

[FortiKoala]

Description

How can I use ZoneFox to help with compliance support for standards and frameworks (HIPAA, PCI, etc.)

Scope

Best Practices / Scenarios

Solution

The Policy based side of ZoneFox allows organisations to set up Policies specifically aligned to particular compliance frameworks. 

For example a Policy monitoring access to a folder known to contain customer PII data could be marked as relevant to GDPR. Framework labels assigned to the policies allow resulting alerts to be easily classified and filtered, for example show me all alerts that are relevant for GDPR - or reflected on the Dashboard. 

Multiple frameworks can be assigned to a single policy, allowing for reuse or cross-framework reporting from one policy.