What is RSA Reporting & Compliance Manager?
RSA Reporting & Compliance Manager is RSA Security's response to the need for better reporting on access to information. By providing industry leading web-based reporting capabilities and a complete set of built-in reports commonly required by administrators and auditors, the tool is a key component of any Identity & Access Management system.

How do organizations benefit from automated identity and access management reporting?
Through better Identity & Access Management reporting capabilities, organizations are able to:

• Better meet requirements for compliance with regulations through centralized reporting and policy management
• Reduce audit costs since external auditors will be able to complete audits more quickly using automated reporting
• Reduce redundancies, bottlenecks and personnel costs through automated reporting administration
• Heighten security for sensitive resources through real-time access to user activity and prompt updates to application access policies
• Develop greater user adherence to organizational policies through improved user monitoring
• Conduct faster and more accurate reporting through centralized logging and access to information
• Gain greater visibility into existing access rights, policies and policy changes

How does RSA Reporting & Compliance Manager work?
RSA Reporting & Compliance Manager offers consolidated reports that combine interpretation of RSA Security solution log events with real-time integration with the entitlements or policy repositories. Reports can be automated to run at specified times or intervals. The built-in report templates can be used to help ensure compliance to organizational policies and regulatory requirements and can be used to implement best practices in information security. The report templates are a powerful aid to auditors and new templates can be easily designed and added. Reports can be easily saved and exported in a variety of common formats.

What standard reports does RSA Reporting & Compliance Manager generate?
RSA Reporting & Compliance Manager offers consolidated reports that combine interpretation of RSA Security solution log events with real-time integration with the entitlements or policy repositories. Reports can be automated to run at specified times or intervals. RSA Reporting & Compliance Manager includes four built-in report templates that are aimed at addressing most compliance laws and regulations requirements:

• Policy reports (who has access to what)
• Policy change reports (how the policy was changed over time)
• Activity reports (who accessed what and when)
• Intrusion reports (unsuccessful access attempts)

The combination of the built-in report templates with the report scheduling capability can help administrators set up a reporting environment that allows auditors to easily answer complex compliance questions such as: “did User X have access to Resource Y at Time Z? Who gave them or denied them access and via what entitlement or policy”?

How does RSA Reporting & Compliance Manager help organizations become and stay compliant?
Governments worldwide are enacting regulations aimed at protecting information. While the regulations affect different industry segments and geographic areas, their requirements for security and accountability produce some common threads related to ensuring that only authorized users gain access to information, and controlling and examining user activity. RSA Reporting & Compliance Manager helps organizations adhere to strict regulations by offering better administrative tools for user tracking, management and activity reporting, thus leading to high user accountability and assured organizational compliance.

What server platforms does RSA Reporting & Compliance Manager support?
Currently, RSA Reporting & Compliance Manager supports Windows, Solaris and Linux platforms.

Which Data Stores are supported by RSA Reporting & Compliance Manager?
RSA Reporting & Compliance Manager needs a SQL-compliant database. Currently, it supports Oracle and Microsoft SQL Server (in the same versions that RSA ClearTrust supports)

What version of RSA ClearTrust is needed to add on RSA Reporting & Compliance Manager?
RSA ClearTrust 5.5.x is needed to interoperate with RSA Reporting & Compliance Manager.

What aspects of the User-Facing screens can an organization change?
Organizations can design and generate custom reports and add them to the existing standard built-in report list.