Regulatory Compliance Components:

1. Dashboard Packages
   1. GDPR
      • LP_GDPR: User Privilege Escalation 
      • LP_GDPR: Incident Management
      • LP_GDPR: Mobile Device Activities
      • LP_GDPR: File System Activities 
      • LP_GDPR: File Access 
      • LP_GDPR: Policies 
      • LP_GDPR: General Access 
      • LP_GDPR: International Connections 
      • LP_GDPR: Account Management and Data Modification 
      • LP_GDPR: Network Access 
   2. PCI DSS
      • LP_PCI DSS 3_2 Req 3&4: Card Holder Data Protection
      • LP_PCI DSS 3_2 Req 1: Network And Connections 
      • LP_PCI DSS 3_2 Req 5: Anti Malware 
      • LP_PCI DSS 3_2 Req 10: Data Access
      • LP_PCI DSS 3_2 Req 6: Change Control 
      • LP_PCI DSS 3_2 Req 2: Default Paramaters
      • LP_PCI DSS 3_2 Req 11: Vulnerability Management
      • LP_PCI DSS 3_2 Req 8: Accountably 
      • LP_PCI DSS 3_2 Req 7: Access Management 
   3. ISO
      • LP_ISO Account Management 
      • LP_ISO 27002 7_0 Asset Management 
      • LP_ISO 27002 4_0 Risk Assessment And Treatment
      • LP_ISO Authentication 
      • LP_ISO Network and Connections 
      • LP_ISO 27002 10_0 Communications and Operations Management 
      • LP_ISO 27002 5_0 Policy Changes 
      • LP_ISO 27002 8_0 Human Resources Security 
      • LP_ISO 27002 11_0 Access Control 
      • LP_ISO 27002 14_0 Business Continuity Management 
   4. HIPPA
      • LP_HIPAA Integrity Controls TS 164_312 
      • LP_HIPAA Network Access Controls TS 164_312 
      • LP_HIPAA PoliciesAndProcedures PPD 164_316 
      • LP_HIPAA Access Controls TS 164_312
      • LP_HIPAA AuthenticationAndTransmission TS 164_312
      • LP_HIPAA Audit Controls TS 164_312 
   5. GPG 13
      • LP_GPG13: User Workstation Server and Device 
      • LP_GPG13: Network Activities 
      • LP_GPG13: Boundary Activities 
      • LP_GPG13: Backup Audit and Alert Status 
   6. GLBA
      • LP_GLBA: Authentication and Authorization
      • LP_GLBA: File Access
      • LP_GLBA: Network and Host Security
   7. NERC-CIP
      
      • LP_NERC-CIP 002: Assets Categorization
      • LP_NERC-CIP 003: Security Management Controls
      • LP_NERC-CIP 005: SECURITY PERIMETER - AUTHENTICATION
      • LP_NERC-CIP 005: SECURITY PERIMETER - NETWORK ACTIVITIES
      • LP_NERC-CIP 008: Incident Response
      • LP_NERC-CIP 009: Recovery Plan Requirements
      • LP_NERC-CIP 010: Configuration Change Management
      • LP_NERC-CIP 010: Vulnerability Assessment
   8. SANS 6 Categories
      • LP_SANS Category 1: Authentication and Authorization
      • LP_SANS Category 2: System and Data Change
      • LP_SANS Category 3: Network Activity
      • LP_SANS Category 4: Resource Access
      • LP_SANS Category 4: Resource Access Database and Email
      • LP_SANS CATEGORY 5 - Malware Activity
      • LP_SANS Category 6: Failure and Critical Error
   9. NIST
      
      • LP_NIST 800-171: Access Control
      • LP_NIST 800-171: Audit and Accountability
      • LP_NIST 800-171: Configuration Management
      • LP_NIST 800-171: Identification and Authentication
      • LP_NIST 800-171: Incident Response
      • LP_NIST 800-171: Media Protection
      • LP_NIST 800-171: Risk Assessment and Treatment
      • LP_NIST 800-171: System and Communication Protection
      • LP_NIST 800-171: System and Information Integrity
2. Report Packages
   1. GDPR
      • LP_GDPR: User Privilege Escalation 
      • LP_GDPR: File Access 
      • LP_GDPR: Policies 
      • LP_GDPR: General Access 
      • LP_GDPR: International Connections 
      • LP_GDPR: Incident Management
      • LP_GDPR: Mobile Device Activities
      • LP_GDPR: File System Activities 
      • LP_GDPR: Account Management and Data Modification 
      • LP_GDPR: Network Access 
   2. GLBA
      • LP_GLBA: Authentication and Authorization
      • LP_GLBA: File Access
      • LP_GLBA: Network and Host Security
   3. HIPPA
      • LP_HIPPA AuthenticationAndTransmission TS 164_312 
      • LP_HIPPA Access Controls TS 164_312 
      • LP_HIPPA PoliciesAndProcedures PPD 164_316 
      • LP_HIPPA Integrity Controls TS 164_312 
      • LP_HIPPA Network Access Controls TS 164_312 
      • LP_HIPPA Audit Controls TS 164_312 
   4. NERC-CIP
      
      • LP_NERC-CIP 002: Assets Categorization
      • LP_NERC-CIP 003: Security Management Controls
      • LP_NERC-CIP 005: SECURITY PERIMETER - AUTHENTICATION
      • LP_NERC-CIP 005: SECURITY PERIMETER - NETWORK ACTIVITIES
      • LP_NERC-CIP 008: Incident Response
      • LP_NERC-CIP 009: Recovery Plan Requirements
      • LP_NERC-CIP 010: Configuration Change Management
      • LP_NERC-CIP 010: Vulnerability Assessment
   5. ISO
      
      • LP_ISO User Account Management 
      • LP_ISO 27002 10_0 Communication and Operation 
      • LP_ISO 27002 4_0 Risk Assessment And Treatment 
      • LP_ISO Authentication 
      • LP_ISO Compliance Report 
      • LP_ISO Network & Connections 
      • LP_ISO 27002 5_0 Policy Changes 
      • LP_ISO 27002 8_0 Human Resources Security
      • LP_ISO 27002 11_0 Access Control 
      • LP_ISO 27002 14_0 Business Continuity Management 
      • LP_ISO 27002 7_0 Asset Management 
   6. NIST
      • LP_NIST 800-171: Access Control
      • LP_NIST 800-171: Audit and Accountability
      • LP_NIST 800-171: Configuration Management
      • LP_NIST 800-171: Identification and Authentication
      • LP_NIST 800-171: Incident Response
      • LP_NIST 800-171: Media Protection
      • LP_NIST 800-171: Risk Assessment and Treatment
      • LP_NIST 800-171: System and Communication Protection
      • LP_NIST 800-171: System and Information Integrity
   7. Compliance Report 
      • LP_PCI Compliance Report 
      • LP_DS484 Compliance Report 
      • LP_SOX Compliance Report 

Enhancement

"Filter" is now a reserved keyword in LogPoint. Therefore, the application encloses the keyword inside a double quotation while using it in a query.

Installation 

Follow these steps to install the Regulatory Compliance v3.1.1:

1. Download the .pak file from the Download link above. 
2. Go to Settings >> System Settings from the navigation bar and click Applications.
3. Click Import.
4. Browse to the downloaded .pak file.
5. Click Upload. 

Screenshots

GDPR

Supported  Regulatory Compliances

The supported Regulatory Compliance modules with LogPoint in this configuration are:

1. GDPR 
   • Windows 
   • Unix 
   • Firewall

   • Special Cases:

     • The LP_GDPR: File System Activities dashboard and report packages require configuration of Windows and Palo Alto Firewall only.
     • The LP_GDPR: User Privilege Escalation dashboard and report packages require configuration of Windows and Unix only. 
2. GPG 13 
3. PCI DSS
4. ISO
5. NERC-CIP
6. SANS 6 Categories
7. NIST
8. GLBA