Secure Audit

For organizations concerned with meeting regulatory compliance and maintaining audit trail integrity for sensitive data and transactions, ActivIdentity Secure Audit solution offers unified, digitally signed, tamper-evident audit capabilities. The security and richness of each audit record allows the logical recreation of system events and supports sophisticated business processes such as fraud prevention and detection of staff collusion.

Organizations looking to deploy both secure audit and leading strong authentication capabilities will benefit from the built-in strong authentication services of ActivIdentity Secure Audit. Whether auditing these native authentication services or a range of other supported services, ActivIdentity Secure Audit provides the security and accountability required for your most sensitive data and transactions.

Features and Benefits

• Comply with mandates and government regulation for identity, privacy, policy enforcement, audit and authentication services.
• Tamper Evident. Only trusted software and users providing the appropriate credentials can generate an audit log entry. All audit records are hashed, sequenced and digitally signed making it impossible to eavesdrop on or change records without breaking the chain of signatures.
• Proven Technology. Protects data, with strong hardware based encryption, using widely accepted and verified standards such as 3DES, PKCS#11 and FIPS 140-2 Level 32 validated Hardware Security Modules (HSM).
• Centralized management enables auditing services across all delivery channels (phone, web, intranet, etc.) and across multiple business units (e.g. different departments, branches, clinics, etc.). Enables tracking of an individual’s system interactions on a session by session basis including the ability to link actions across multiple delivery channels.
• Deployment Flexibility. Capable of auditing any server functions exposed through a standards based public API accessed via SOAP, RMI, standardized XML schemas such as SAML, or message oriented software such as IBM® WebSphere® MQ.
• Ease of Use. Allows online audit verification and querying of audit records via a user-friendly interface, API or offline mode using audit extracts and management reporting.

Standards compliance

• Audit Log signing uses 3DES
• HSM is FIPS 140-2 Level 32 validated
• HSM processing uses PKCS#11