As a response to audit findings and the Sarbanes Oxley legislation around Segregation of Duties issues we have implemented the Virsa VRAT tool. Does anyone have experience with this tool or with Virsa? My specific question is around the use of their (VIRSA's) Segreation of Duties rules. We are using the SODs that Virsa provided but we are finding many that don't really seem to pose the risk that Virsa has described with the way the rules are currently written and I am concerned that we are creating undo work for ourselves by trying to mitigate all these SOD rules, but then again, if the rules are right and we ignore them, we are putting the company at risk. Just wondering if anyone has any experience in this area.
Free Guide: Managing storage for virtual environments
Complete a brief survey to get a complimentary 70-page whitepaper featuring the best methods and solutions for your virtual environment, as well as hypervisor-specific management advice from TechTarget experts. Don’t miss out on this exclusive content!