Security Business Solutions Using VigilEnt Policy Center VPC can be used in a variety of settings to solve specific security challenges in your environment. Examples include: Security Awareness Assessments - VPC can be used to easily baseline your organizations security awareness level. Pre-built, scored security self-assessments can be easily customized and then published to the entire organization. Management reports can view scores by department, geography or company-wide. These functions allow you to directly measure the return on your security awareness efforts. Policy Governance and Testing - Demonstrate to external and internal auditors testable controls over your policy document management. Audit reports keep track of which documents were published on what date and which users read and acknowledged them. For the first time, you can confidently assert that each user in your organization has read the documents assigned to them. These automated functions will save thousands of dollars in Sarbanes-Oxley compliance. Regulatory Compliance Monitoring - Easily demonstrate that you are following "due-care" in security policy management. Detailed audit reports demonstrate policy document review and ownership. Policy document archive keeps a running history of policy document versions and which employees read which versions. User Certification and Provisioning - VPC can be used to certify that employees or contractors should have access to various organizational assets. For example, users can be required to read the "Internet Acceptable Use" document and pass a quiz before being allowed to the internet. User Education and Training - VPC can be used to target security awareness material at different roles in the organization, including training documents, quizzes and news items. Flexible HTML-based quizzes allows links to CBT-training modules. Use VPC to verify that users within a specific role have taken training and passed basic awareness levels, reducing overall liability. Security Incident Reporting and Management - Use VPC to allow users to submit possible security violations either anonymously or with a secure login. Incidents are then logged and can be securely managed by various administrators. "People generated" incidents can be easily integrated into other security event management systems, allowing a "holistic" view of both technical and people-generated threats. For more information how you can use VPC to implement any of these or many other applications, please contact us.