RegScale

WizとRegScaleを組み合わせて、Wizでクラウド環境を定期的に評価し、セキュリティドキュメントを自動更新して、コンプライアンスの書類がリアルタイムで同期されるようにします。

統合の概要

Tying best-in-class cloud security monitoring from Wiz with RegScale’s modern GRC (Governance, Risk, and Compliance) platform for automated and self-updating compliance and risk programs . Integration reduces risk, drives efficiency, and improves ROI.

Integration Benefits

RegScale automatically collects all the compliance and risk data from Wiz into a single controls data lake with a mesh architecture for deeper visibility, near real-time data intelligence, consistent roll-ups, and automated regulatory reporting and audits
By utilizing Wiz to maintain compliance packages automatically, RegScale keeps compliance documentation updated in realtime and applies risk and vulnerability data to the Observe, Orient, Decide, Act (OODA) loop in real-time
Capture risks into a single risk register and manage risk against multiple compliance packages specific to a Wiz Project ID
Capture and utilize Wiz data to conduct incident response and investigation data, including workflows and timelines

Better Together

Wiz partnered with RegScale to unite its new best-in-class cloud security posture management system with RegScale’s bestin-class, modern GRC platform to share prioritized security findings against security controls, enabling effective management and prioritization of issues and risk faster and more affordably than ever before.

ユースケースの概要

A leading organization in the defense and security sector utilizes Wiz to identify both Cloud Assets and any associated issues and sends all the data to RegScale via our CommandLine Interface (CLI).

Streamline asset management and ensure prompt corrective actions, fortifying your security posture and risk mitigation.

• Issues are documented against a security plan and forwarded to any number of workflow managers to generate ITIL Incident tickets for Service Owners to handle.

• Upon completion of the work, updated ticket information is sent to RegScale via API, including associated paperwork, and when the ticket is closed, the related issue is closed in RegScale.

• Assets are logged in RegScale, and any new asset that requires associated security checks such as STIG’s or CIS benchmark requirements will trigger actions to conduct and document the required checks in RegScale.