Regulatory Compliance
Regulatory Compliance normalizes Regulatory Compliance events and enables you to analyze their data using reports and pre-set dashboard views.
Package Details
Regulatory Compliance Components:
-
Dashboard Packages
-
GDPR
- LP_GDPR: User Privilege Escalation
- LP_GDPR: Incident Management
- LP_GDPR: Mobile Device Activities
- LP_GDPR: File System Activities
- LP_GDPR: File Access
- LP_GDPR: Policies
- LP_GDPR: General Access
- LP_GDPR: International Connections
- LP_GDPR: Account Management and Data Modification
- LP_GDPR: Network Access
-
PCI DSS
- LP_PCI DSS 3_2 Req 3&4: Card Holder Data Protection
- LP_PCI DSS 3_2 Req 1: Network And Connections
- LP_PCI DSS 3_2 Req 5: Anti Malware
- LP_PCI DSS 3_2 Req 10: Data Access
- LP_PCI DSS 3_2 Req 6: Change Control
- LP_PCI DSS 3_2 Req 2: Default Paramaters
- LP_PCI DSS 3_2 Req 11: Vulnerability Management
- LP_PCI DSS 3_2 Req 8: Accountably
- LP_PCI DSS 3_2 Req 7: Access Management
-
ISO
- LP_ISO Account Management
- LP_ISO 27002 7_0 Asset Management
- LP_ISO 27002 4_0 Risk Assessment And Treatment
- LP_ISO Authentication
- LP_ISO Network and Connections
- LP_ISO 27002 10_0 Communications and Operations Management
- LP_ISO 27002 5_0 Policy Changes
- LP_ISO 27002 8_0 Human Resources Security
- LP_ISO 27002 11_0 Access Control
- LP_ISO 27002 14_0 Business Continuity Management
-
HIPPA
- LP_HIPAA Integrity Controls TS 164_312
- LP_HIPAA Network Access Controls TS 164_312
- LP_HIPAA PoliciesAndProcedures PPD 164_316
- LP_HIPAA Access Controls TS 164_312
- LP_HIPAA AuthenticationAndTransmission TS 164_312
- LP_HIPAA Audit Controls TS 164_312
-
GPG 13
- LP_GPG13: User Workstation Server and Device
- LP_GPG13: Network Activities
- LP_GPG13: Boundary Activities
- LP_GPG13: Backup Audit and Alert Status
-
GLBA
- LP_GLBA: Authentication and Authorization
- LP_GLBA: File Access
- LP_GLBA: Network and Host Security
-
NERC-CIP
- LP_NERC-CIP 002: Assets Categorization
- LP_NERC-CIP 003: Security Management Controls
- LP_NERC-CIP 005: SECURITY PERIMETER - AUTHENTICATION
- LP_NERC-CIP 005: SECURITY PERIMETER - NETWORK ACTIVITIES
- LP_NERC-CIP 008: Incident Response
- LP_NERC-CIP 009: Recovery Plan Requirements
- LP_NERC-CIP 010: Configuration Change Management
- LP_NERC-CIP 010: Vulnerability Assessment
-
SANS 6 Categories
- LP_SANS Category 1: Authentication and Authorization
- LP_SANS Category 2: System and Data Change
- LP_SANS Category 3: Network Activity
- LP_SANS Category 4: Resource Access
- LP_SANS Category 4: Resource Access Database and Email
- LP_SANS CATEGORY 5 - Malware Activity
- LP_SANS Category 6: Failure and Critical Error
-
NIST
- LP_NIST 800-171: Access Control
- LP_NIST 800-171: Audit and Accountability
- LP_NIST 800-171: Configuration Management
- LP_NIST 800-171: Identification and Authentication
- LP_NIST 800-171: Incident Response
- LP_NIST 800-171: Media Protection
- LP_NIST 800-171: Risk Assessment and Treatment
- LP_NIST 800-171: System and Communication Protection
- LP_NIST 800-171: System and Information Integrity
-
GDPR
-
Report Packages
-
GDPR
- LP_GDPR: User Privilege Escalation
- LP_GDPR: File Access
- LP_GDPR: Policies
- LP_GDPR: General Access
- LP_GDPR: International Connections
- LP_GDPR: Incident Management
- LP_GDPR: Mobile Device Activities
- LP_GDPR: File System Activities
- LP_GDPR: Account Management and Data Modification
- LP_GDPR: Network Access
-
GLBA
- LP_GLBA: Authentication and Authorization
- LP_GLBA: File Access
- LP_GLBA: Network and Host Security
-
HIPPA
- LP_HIPPA AuthenticationAndTransmission TS 164_312
- LP_HIPPA Access Controls TS 164_312
- LP_HIPPA PoliciesAndProcedures PPD 164_316
- LP_HIPPA Integrity Controls TS 164_312
- LP_HIPPA Network Access Controls TS 164_312
- LP_HIPPA Audit Controls TS 164_312
-
NERC-CIP
- LP_NERC-CIP 002: Assets Categorization
- LP_NERC-CIP 003: Security Management Controls
- LP_NERC-CIP 005: SECURITY PERIMETER - AUTHENTICATION
- LP_NERC-CIP 005: SECURITY PERIMETER - NETWORK ACTIVITIES
- LP_NERC-CIP 008: Incident Response
- LP_NERC-CIP 009: Recovery Plan Requirements
- LP_NERC-CIP 010: Configuration Change Management
- LP_NERC-CIP 010: Vulnerability Assessment
-
ISO
- LP_ISO User Account Management
- LP_ISO 27002 10_0 Communication and Operation
- LP_ISO 27002 4_0 Risk Assessment And Treatment
- LP_ISO Authentication
- LP_ISO Compliance Report
- LP_ISO Network & Connections
- LP_ISO 27002 5_0 Policy Changes
- LP_ISO 27002 8_0 Human Resources Security
- LP_ISO 27002 11_0 Access Control
- LP_ISO 27002 14_0 Business Continuity Management
- LP_ISO 27002 7_0 Asset Management
-
NIST
- LP_NIST 800-171: Access Control
- LP_NIST 800-171: Audit and Accountability
- LP_NIST 800-171: Configuration Management
- LP_NIST 800-171: Identification and Authentication
- LP_NIST 800-171: Incident Response
- LP_NIST 800-171: Media Protection
- LP_NIST 800-171: Risk Assessment and Treatment
- LP_NIST 800-171: System and Communication Protection
- LP_NIST 800-171: System and Information Integrity
-
Compliance Report
- LP_PCI Compliance Report
- LP_DS484 Compliance Report
- LP_SOX Compliance Report
-
GDPR
Enhancement
Regulatory Compliance has been updated to comply with Logpoint v6.7.0.
Installation
Regulatory Compliance is bundled with Logpoint v7.2.0. Follow the steps below to install it separately:
- Download the .pak file using the Download link above.
- Go to Settings >> System Settings from the navigation bar and click Applications.
- Click Import.
- Browse to the downloaded .pak file.
- Click Upload.
Screenshots
GDPR
Supported Regulatory Compliances
The supported Regulatory Compliance modules with Logpoint in this configuration are:
-
GDPR
- Windows
- Unix
- Firewall
-
Special Cases:
- The LP_GDPR: File System Activities dashboard and report packages require configuration of Windows and Palo Alto Firewall only.
- The LP_GDPR: User Privilege Escalation dashboard and report packages require configuration of Windows and Unix only.
- GPG 13
- PCI DSS
- ISO
- NERC-CIP
- SANS 6 Categories
- NIST
- GLBA
Package Details
Regulatory Compliance Components:
-
Dashboard Packages
-
GDPR
- LP_GDPR: User Privilege Escalation
- LP_GDPR: Incident Management
- LP_GDPR: Mobile Device Activities
- LP_GDPR: File System Activities
- LP_GDPR: File Access
- LP_GDPR: Policies
- LP_GDPR: General Access
- LP_GDPR: International Connections
- LP_GDPR: Account Management and Data Modification
- LP_GDPR: Network Access
-
PCI DSS
- LP_PCI DSS 3_2 Req 3&4: Card Holder Data Protection
- LP_PCI DSS 3_2 Req 1: Network And Connections
- LP_PCI DSS 3_2 Req 5: Anti Malware
- LP_PCI DSS 3_2 Req 10: Data Access
- LP_PCI DSS 3_2 Req 6: Change Control
- LP_PCI DSS 3_2 Req 2: Default Paramaters
- LP_PCI DSS 3_2 Req 11: Vulnerability Management
- LP_PCI DSS 3_2 Req 8: Accountably
- LP_PCI DSS 3_2 Req 7: Access Management
-
ISO
- LP_ISO Account Management
- LP_ISO 27002 7_0 Asset Management
- LP_ISO 27002 4_0 Risk Assessment And Treatment
- LP_ISO Authentication
- LP_ISO Network and Connections
- LP_ISO 27002 10_0 Communications and Operations Management
- LP_ISO 27002 5_0 Policy Changes
- LP_ISO 27002 8_0 Human Resources Security
- LP_ISO 27002 11_0 Access Control
- LP_ISO 27002 14_0 Business Continuity Management
-
HIPPA
- LP_HIPAA Integrity Controls TS 164_312
- LP_HIPAA Network Access Controls TS 164_312
- LP_HIPAA PoliciesAndProcedures PPD 164_316
- LP_HIPAA Access Controls TS 164_312
- LP_HIPAA AuthenticationAndTransmission TS 164_312
- LP_HIPAA Audit Controls TS 164_312
-
GPG 13
- LP_GPG13: User Workstation Server and Device
- LP_GPG13: Network Activities
- LP_GPG13: Boundary Activities
- LP_GPG13: Backup Audit and Alert Status
-
GLBA
- LP_GLBA: Authentication and Authorization
- LP_GLBA: File Access
- LP_GLBA: Network and Host Security
-
NERC-CIP
- LP_NERC-CIP 002: Assets Categorization
- LP_NERC-CIP 003: Security Management Controls
- LP_NERC-CIP 005: SECURITY PERIMETER - AUTHENTICATION
- LP_NERC-CIP 005: SECURITY PERIMETER - NETWORK ACTIVITIES
- LP_NERC-CIP 008: Incident Response
- LP_NERC-CIP 009: Recovery Plan Requirements
- LP_NERC-CIP 010: Configuration Change Management
- LP_NERC-CIP 010: Vulnerability Assessment
-
SANS 6 Categories
- LP_SANS Category 1: Authentication and Authorization
- LP_SANS Category 2: System and Data Change
- LP_SANS Category 3: Network Activity
- LP_SANS Category 4: Resource Access
- LP_SANS Category 4: Resource Access Database and Email
- LP_SANS CATEGORY 5 - Malware Activity
- LP_SANS Category 6: Failure and Critical Error
-
NIST
- LP_NIST 800-171: Access Control
- LP_NIST 800-171: Audit and Accountability
- LP_NIST 800-171: Configuration Management
- LP_NIST 800-171: Identification and Authentication
- LP_NIST 800-171: Incident Response
- LP_NIST 800-171: Media Protection
- LP_NIST 800-171: Risk Assessment and Treatment
- LP_NIST 800-171: System and Communication Protection
- LP_NIST 800-171: System and Information Integrity
-
GDPR
-
Report Packages
-
GDPR
- LP_GDPR: User Privilege Escalation
- LP_GDPR: File Access
- LP_GDPR: Policies
- LP_GDPR: General Access
- LP_GDPR: International Connections
- LP_GDPR: Incident Management
- LP_GDPR: Mobile Device Activities
- LP_GDPR: File System Activities
- LP_GDPR: Account Management and Data Modification
- LP_GDPR: Network Access
-
GLBA
- LP_GLBA: Authentication and Authorization
- LP_GLBA: File Access
- LP_GLBA: Network and Host Security
-
HIPPA
- LP_HIPPA AuthenticationAndTransmission TS 164_312
- LP_HIPPA Access Controls TS 164_312
- LP_HIPPA PoliciesAndProcedures PPD 164_316
- LP_HIPPA Integrity Controls TS 164_312
- LP_HIPPA Network Access Controls TS 164_312
- LP_HIPPA Audit Controls TS 164_312
-
NERC-CIP
- LP_NERC-CIP 002: Assets Categorization
- LP_NERC-CIP 003: Security Management Controls
- LP_NERC-CIP 005: SECURITY PERIMETER - AUTHENTICATION
- LP_NERC-CIP 005: SECURITY PERIMETER - NETWORK ACTIVITIES
- LP_NERC-CIP 008: Incident Response
- LP_NERC-CIP 009: Recovery Plan Requirements
- LP_NERC-CIP 010: Configuration Change Management
- LP_NERC-CIP 010: Vulnerability Assessment
-
ISO
- LP_ISO User Account Management
- LP_ISO 27002 10_0 Communication and Operation
- LP_ISO 27002 4_0 Risk Assessment And Treatment
- LP_ISO Authentication
- LP_ISO Compliance Report
- LP_ISO Network & Connections
- LP_ISO 27002 5_0 Policy Changes
- LP_ISO 27002 8_0 Human Resources Security
- LP_ISO 27002 11_0 Access Control
- LP_ISO 27002 14_0 Business Continuity Management
- LP_ISO 27002 7_0 Asset Management
-
NIST
- LP_NIST 800-171: Access Control
- LP_NIST 800-171: Audit and Accountability
- LP_NIST 800-171: Configuration Management
- LP_NIST 800-171: Identification and Authentication
- LP_NIST 800-171: Incident Response
- LP_NIST 800-171: Media Protection
- LP_NIST 800-171: Risk Assessment and Treatment
- LP_NIST 800-171: System and Communication Protection
- LP_NIST 800-171: System and Information Integrity
-
Compliance Report
- LP_PCI Compliance Report
- LP_DS484 Compliance Report
- LP_SOX Compliance Report
-
GDPR
Enhancement
"Filter" is now a reserved keyword in LogPoint. Therefore, the application encloses the keyword inside a double quotation while using it in a query.
Installation
Follow these steps to install the Regulatory Compliance v3.1.1:
- Download the .pak file from the Download link above.
- Go to Settings >> System Settings from the navigation bar and click Applications.
- Click Import.
- Browse to the downloaded .pak file.
- Click Upload.
Screenshots
GDPR
Supported Regulatory Compliances
The supported Regulatory Compliance modules with LogPoint in this configuration are:
-
GDPR
- Windows
- Unix
- Firewall
-
Special Cases:
- The LP_GDPR: File System Activities dashboard and report packages require configuration of Windows and Palo Alto Firewall only.
- The LP_GDPR: User Privilege Escalation dashboard and report packages require configuration of Windows and Unix only.
- GPG 13
- PCI DSS
- ISO
- NERC-CIP
- SANS 6 Categories
- NIST
- GLBA
Support
If you have any queries or require assistance, please feel free to contact our support team:
Email: servicedesk@logpoint.com
Phone: +45 7060 6100
Best regards,
Hello,
could you provide a detailed guide/ provide assistance on how to install this on LogPoint version 7.1.0?
Unless updated recently all the packages come preinstalled with Logpoint and get upgraded to the latest versions with each Logpoint upgrade. Considering that v5 of this was released quite a while ago your Logpoint will already contain it, and you should be able to see all the dashboards and reports that are listed under "Package details" in your Logpoint.
Okay Thank you.