As technology marches on, the reliance on human interaction is fast diminishing. This is something that now holds true with the automation of governance and compliance, provided by the BMC Server Automation suite from BMC, available locally through Quintica.
According to Gerhard Oosthuizen, senior consultant cloud and automation at Quintica, with Server Automation businesses no longer need to call on the services of an auditor to come in once a month to ensure that governance and compliance is being met by an organisation.
Making use of a series of automated tools, the software will govern areas such as infrastructure deployment, configuration management, auditing and internal compliance.
“Maintaining compliance can eat away at your resources and lead to hidden costs your business has not budgeted for,” states Oosthuizen.
“With Server Automation your business can take advantage of a solution that promotes standardisation of policies across the entire infrastructure and allows you to maintain better compliance within set standards.
“In addition it offers detailed auditing, a security compliance audit across the infrastructure, remediation on configuration deployments and roll back, as well as a universal console to manage all network devices in your business,” he adds.
With Server Automation, users can take advantage of a system that performs both auditing and changes, and does these in line with the standards to which a business needs to comply, such as CIS, DISA, STIG, SOX, HiPAA and PCI DSS, to name a few.
It also enables users to conduct remediation if anything changes on their systems as well as system administration where needed. Closer to home, this also applies to the Protection of Personal Information (POPI or PPI) act, where it enables an organisation to configure their own internal compliance, as well as appropriate rules and standards for auditing purposes.
An out of the box solution, that requires very little customisation, the system draws from standardised security installations required to meet compliance objectives and then ascertains the current level of compliance, while offering alternatives to ensure complete adherence to desired standards.
In addition, Server Automation also adds another layer of compliance for companies transacting or hosting parts of their business in the cloud.
“Compliance might be high on the agenda of financial institutions but is not something that is being considered and metered by vertical industries in South Africa. But locally this is changing, as more businesses are being held accountable by governing bodies for what is happening in the backend of their businesses,” says Oosthuizen.
“Instead of redesigning your entire business to meet these demands, Server Automation provides a qualified and proven solution that ticks all of the global compliance boxes.”
The software has been built on an architecture that integrates configuration automation and compliance assurance, enabling organisations to implement a policy-based automation solution for managing their data centres, and ensures uptime for critical business services.
It also provides a single platform for managing physical and virtual servers, across all major virtual platforms, it supports a robust security model, dramatically reduces operational costs, improves operational quality, and enables operational compliance by addressing three main areas: configuration; provisioning; and compliance.