.%20TODO(brand):%20replace%20with%20the%20master%20vector%20from%20the%20brand%20files.%20--%3e%3cdefs%3e%3clinearGradient%20id='rudratic-mark'%20x1='0'%20y1='195'%20x2='0'%20y2='828'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20offset='0'%20stop-color='%235a0bd8'%20/%3e%3cstop%20offset='1'%20stop-color='%23a5157c'%20/%3e%3c/linearGradient%3e%3c/defs%3e%3cg%20fill='url(%23rudratic-mark)'%3e%3cpath%20d='M253%20448%20545%20195l60%2070-292%20252z'%20/%3e%3cpath%20d='M348%20558%20473%20450v200L348%20768z'%20/%3e%3cpath%20d='M523%20405%20640%20305l83%2097-141%20120%20153%20128-102%2087-110-97z'%20/%3e%3cpath%20d='m663%20763%2072-61v126z'%20/%3e%3c/g%3e%3c/svg%3e){kind=small}
Compliance support
How SWOT produces evidence for the access and audit controls in PCI DSS, HIPAA, SOX and NIST. The products support controls; meeting them depends on your configuration, scope and assessment.
Compliance support
- PCI DSS v4.0Evidence for PCI DSS access and logging requirementsAccess to cardholder data and system components is limited to what each role needs, and reviewed.Read more
- HIPAA Security RuleEvidence for HIPAA technical safeguardsOnly authorised people and software can reach ePHI, each with a unique identity.Read more
- SOXEvidence for SOX IT general controlsWho can reach the systems and data behind the financial statements, and who approved it.Read more
- NIST SP 800-53 and CSF 2.0Evidence for NIST access control and audit controlsAccounts are managed through their life, and privileged rights are limited to what each task needs.Read more
Talk it through with the team
Tell us what you need to control or prove, and we will show you the parts of SWOT that do it.