Risk, Fraud & Compliance

Every enterprise needs a comprehensive plan for risk, fraud and compliance management. But there is a critical area that is challenging to handle, and often neglected. In almost every environment there are user processes that span several different applications. Because they have no inherent logging or event generation capabilities, they are effectively outside the reach of your Security Information Management (SIM) and Security Event Management (SEM) policies. Until now.

OpenSpan's unique monitor and analyze technology enables you to quickly add auditing capabilities to virtually any new or existing application. Use OpenSpan to gather complete user activity information down to the mouse click if necessary to see what users are doing inside individual applications or in processes that span multiple applications. This unprecedented visibility into your users' activity, in conjunction with OpenSpan's automation technology, can be used to avoid fraud and compliance risks.

Some of the possibilities with OpenSpan include:

Risk:

Implement an instant audit trail of user activity
Insert automatic checks into user processes for abnormal data entry (large transactions, exceptional credits / debits, etc.)
Add calls to risk management engines into processes involving legacy applications

Fraud:

Monitor user interactions for suspicious patterns
Trigger alerts or stop processes when fraud patterns are detected
Hide fields or entire applications with sensitive data from users

Compliance:

Instrument compliance changes in applications without changes to source code
Effect changes to user interactions with applications that remove the requirement for compliance auditing (data masking, automatic call recording pauses, etc.)
Add contextual user guidance to drive adherence to corporate procedure
Track compliance violations
Generate real-time alerts when process deviations are detected (e.g. SOX, HIPAA, and PCI compliance)