The administrator must perform certain tasks before the system users can use CCS to collect and report on the compliance data from across the organization.
You can access the Configuration topic from the Help > Configuration menu item.
You do the following tasks to initially configure CCS. Click on the links to learn more about how to perform each task.
See Table: Initial configuration tasks.
See Table: Assets, data collection, and evaluation tasks.
See Table: Entitlements, reports, and dashboards tasks.
See Table: Policies and RAM tasks.
Table: Initial configuration tasks
Tasks and links |
Description |
---|---|
Assign users to roles. |
The role determines what you can see and perform in the CCS Console. In addition to the role, you must have permission on the required folders and objects to successfully perform a task. |
Create asset folders in the Manage > Asset System view. |
The user-defined folders store business objects in a hierarchical manner that reflects your organizational structure. The user-defined folders let you effectively assign permissions. When you install CCS, a default hierarchy structure is created to store objects. Users should organize the tree to follow the flow of control in the organization. |
Assign permissions to trustees. |
You must manually assign permissions to the user-defined folders. When a role is assigned to a user, permissions are automatically granted to the objects in the predefined folders. See Assigning permissions from the Permission Management view. |
Create sites to match the structure in the deployment plan. |
You create sites to manage logical groups of assets. Grouping of assets facilitate data collection and other CCS operations. See Creating a site. |
Register installed Data Processing Service instances. |
Before the Application Server can use a newly installed Data Processing Service (DPS), you must register the DPS with the Application Server. When you register the DPS, you also assign the DPS to a site and specify the DPS roles. Where appropriate, specify data types to collect. |
You do the following tasks to discover assets, and then collect and evaluate data from the imported assets.
Table: Assets, data collection, and evaluation tasks
Task |
Description and task links |
---|---|
Create asset import reconciliation rules as specified in the deployment plan. |
The reconciliation rules let you filter the potential assets before they enter the asset system. The reconciliation rules also help to update the field values of the existing assets. |
Create asset import jobs. |
You must import assets from the network before you can collect data from the assets and evaluate the assets against specific standards and checks. You can import the assets in one of the following ways: See Importing the assets for the first time. See Importing asset-specific fields from the default data collector. See Importing asset-specific and common fields using the default data collector. See Importing asset-specific and common fields using the CSV data collector. See Importing the specific and common fields for custom asset using the CSV data collector. |
Set up data collection jobs. |
After you have imported the assets you create jobs to collect data from the imported assets. |
Create evaluation jobs. |
After you have collected the data from the imported assets you create jobs to evaluate the assets. |
You do the following tasks to discover control points and create reports and dashboards.
Table: Entitlements, reports, and dashboards tasks
Task |
Description and task links |
---|---|
Mark and configure entitlement control points. |
You mark an asset as a control point to monitor the entitlements of the asset through the approval workflow. See Marking an asset as a control point. You configure a control point to assign a data owner, an approver, the tags, and the review cycle to the control point |
Create report jobs. |
The report job generates a report with the data from the reporting database. You must synchronize the reporting database to view the latest data before you run a report job. The Scheduled Reporting Database Synchronization job is an existing job in the Monitor > Jobs view. See Running a job now. See Scheduling a report . |
Create dashboard jobs. |
The dashboard job generates the dashboard with the data from the reporting database. You must synchronize the reporting database to view the latest data before you run a dashboard job. The Scheduled Reporting Database Synchronization job is an existing job in the Monitor > Jobs view. See Running a job now. See Scheduling a dashboard . |
You do the following tasks to create and publish policies across the organization.
Table: Policies and RAM tasks
Task |
Description and task links |
---|---|
Create policies. |
Policies are rules established by an organization. Policies are designed to guide their employees. You can create a policy from scratch or import a Microsoft Word document as a policy. |
Publish policies. |
After a policy is created and approved, the policy is published to the selected audience members in the organization. The audience members can access the policy from the CCS Web Portal. See Publishing a policy. |
Optionally publish Response Assessment module questionnaires. |
See Symantec Response Assessment module User Guide for information on publishing questionnaires. |