Symantec Control Compliance Suite
Documentation Home
Symantec Control Compliance Suite
Introducing Control Compliance Suite
Control Compliance Suite 9.0
What Control Compliance Suite 9.0 can do for you
How Control Compliance Suite works
Components of Control Compliance Suite
About the Control Compliance Suite Console
About the Control Compliance Suite Application Server
About the Control Compliance Suite Directory Server
About the Control Compliance Suite directory
Objects in the directory
About organizing objects in the directory
About the Control Compliance Suite Data Processing Service
About the Data Processing Service Load Balancer
About the Data Processing Service Reporter
About the Data Processing Service Collector
About the Data Processing Service Evaluator
About the Control Compliance Suite production database
About the Control Compliance Suite reporting database
About the Control Compliance Suite evidence database
About the Control Compliance Suite Web Portal
About the Control Compliance Suite Web Portal server
About the Control Compliance Suite Management Service
About Response Assessment module (RAM)
Where to get more information
Using the Control Compliance Suite Console
About the console features
About the menu bar
About the tree pane
About the Filter by pane
About the table pane
About the details pane
About the taskbar
Accessing tasks
About the console views
About the Home view
About the Monitor view
About the Manage view
About the Settings view
About the Reporting view
Adding credentials for scheduled jobs
About the User preferences view
Working in the console
Using filters in the Filter by pane
Customizing the filter options
Managing the table pane
Viewing and editing the object details
Selecting the columns headings
Refreshing the view
Searching for objects
About working in the tree pane
Creating folders in the tree pane
About using special characters in folder and job names
Moving folders in the tree pane
Deleting folders in the tree pane
Renaming folders in the tree pane
Refreshing folders in the tree pane
Configuring Control Compliance Suite
Configuration tasks
Managing certificates
About Management Services
About the Certificates view
About managing certificates using the command line
Using the Certificate Management console
About the Certificate Management console
Creating a DPS or an Application Server certificate
Renewing certificates
Revoking certificates
Removing revoked certificates
Configuring roles and permissions
About roles
About permissions
About tasks
Predefined roles
About custom roles
About the Roles view
About the Permission Management view
Restrictions on collecting data from assets
Working with roles
Adding users and groups to a role
Removing a user or a group from a role
Viewing users assigned to a role
Viewing tasks associated to a role
Assigning permissions from the Roles view
Creating a custom role
Copying a role
Editing a custom role
Deleting a role
Working with permissions
Assigning permissions from the Permission Management view
Removing permissions
Registering and configuring the Data Processing Service
About Data Processing Service roles
Registering the Data Processing Service
Unregistering a Data Processing Service
Configuring the basic Data Processing Service settings
Configuring the advanced Data Processing Service settings
Assigning a role to a Data Processing Service
Synchronizing Data Processing Service settings
Working in the System Topology view
About the Map view
About navigating in the Map view
About the Grid view
Modifying the settings of a component
Viewing additional component information
Saving an image of the configuration layout
Viewing the health and the status information
Refreshing the health and the status information
Monitoring infrastructure jobs
Configuring sites
What sites can do for you
About using sites
About planning sites
Creating a site
Deleting a site
Assigning a Data Processing Service to a site
Removing a Data Processing Service from a site
Configuring the data collectors
Configuring the Windows data collector
Configuring the UNIX data collector
Configuring the Oracle data collector
Configuring the SQL data collector
Configuring the ESM data collector
Configuring the ESM components
Configuring the ESM manager settings
Adding, modifying, or removing an ESM manager
Configuring an ESM manager for custom messages
Collecting suppressed ESM messages
Configuring ESM policy run options
Configuring the ESM general settings
Thread settings for ESM data collector
Poll settings for ESM data collector
Recommended Data Processing Service settings for ESM data collector
Configuring the CSV data collector
Creating a CSV file
About the list field format in CSV file
Configuring the general settings
Configuring the data locations
Enabling and disabling audit setting
Configuring the email notification settings
Selecting the DPS to synchronize the reporting database
Synchronizing the reporting database
Configuring the evidence purge job
About the purge settings
Configuring the purge settings
Configuring the purge job schedule
Configuring the Response Assessment module settings
Configuring the entitlements settings
Configuring the exceptions settings
Customizing the report
Configuring the policy settings
Configuring the Home view settings
Configuring the standards settings
Configuring the job settings
Configuring the assets count settings
About auditing
About audit event triggers
About viewing the audit logs
Managing licenses
About the License view
Adding a license
Adding licenses on the Directory Server
Viewing the list of licenses
Managing users
About the User Management view
About adding a user account
Importing user accounts
Updating a user email address
Deleting user accounts
Updating user accounts
Configuring the Application Server settings
About the security settings for scheduled jobs
Configuring the assets batch size
Configuring the SQL Server settings
Configuring the Application Server database connection settings
Configuring the reporting database connection
Configuring the SSIS Server Connection
Configuring the Application Server credentials
Configuring service accounts with unconstrained delegation
Configuring the S4U and constrained delegation
About using special characters in credentials
Updating Control Compliance Suite
How LiveUpdate works in CCS
About the LiveUpdate view
Enabling and scheduling LiveUpdate
About the host file for Windows LiveUpdate clients
About the LiveUpdate staging location
Performing LiveUpdate on demand
Collecting evidence from RAM
Adding a link to Control Compliance Suite
Adding a user-defined property in RAM
Publishing a questionnaire with invitations in RAM
About configuring the Web Portal to contact RAM
About logs
About log messages
About log message severity levels
About log message category
Performing the IT governance tasks with Control Compliance Suite
Preparing for risk assessment
Assessing the compliance and the risk posture of the system
Simplifying the remediation process
Identifying possible threats in the access control system
Managing assets
Getting started with the asset system
About the Asset System view
About the Reconciliation Rules view
Concepts in assets
About assets
Site as scope in asset import
Asset folder hierarchy
Predefined platforms
Asset types
Predefined asset types
Fields for ESM agents
Fields for Oracle Configured Databases
Fields for Oracle Configured Servers
Fields for SQL Databases
Fields for SQL Server
Fields for UNIX File
Fields for UNIX Group
Fields for UNIX Machine
Fields for Windows Domain
Fields for Windows Directory
Fields for Windows File
Fields for Windows Group
Fields for Windows Machine
Probable asset types
Custom asset types
Primary and secondary assets
Reconciliation rules and rule types
Pre rule
Add rule
Update rule
Post rule
Predefined reconciliation rules
Asset being imported
Existing assets
Asset import
Default data collectors
Data collectors and asset types
Examples of asset filters
Filter statement operators
Asset reconciliation
Manual review
Asset tagging
Asset groups
Dynamic asset groups
Static asset groups
Predefined asset groups
Active assets
Creating reconciliation rules
Creating reconciliation rules without manual review
Creating reconciliation rules using the manual review
Working with reconciliation rules scenarios
Using a Pre rule to set the values of the common fields
Using an Add rule to dynamically create asset folders
Using an Update rule to update the existing field values
Using a Post rule to mark the assets as control points
Importing assets
About the first time asset import
Importing the assets for the first time
Working with asset import scenarios
About the working of default data collectors in asset import
About the working of CSV data collector in asset import
Configuring Common platform through CSV settings
Importing asset-specific fields from the default data collector
Importing asset-specific and common fields using the default data collector
Importing asset-specific and common fields using the CSV data collector
Importing the specific and common fields for custom asset using the CSV data collector
Updating the assets in the system after the import
Common fields for all asset types
About scopes in asset import
Default scope and supported scope
Reviewing the assets manually
Viewing the manual review records
Reconciling the manual review records
Creating asset groups
Creating a dynamic asset group
Creating a static asset group
Deleting inactive assets using the asset groups
Operators (, ), AND, OR
Performing the tasks in the Asset System view
Creating the asset folders
Performing the asset group tasks
Editing an asset group
Copying and pasting an asset group
Performing the global tasks
Marking an asset as a control point
Requesting an exception for assets on checks
Setting up a data collection job
Running an evaluation job
Performing the asset tasks
Editing assets
Moving an asset
Exporting CSV headers
Deleting assets or asset groups
Viewing asset information in the details pane
Asset details pane- General tab
Asset details pane- Asset-type Properties tab
Asset details pane- Custom Properties tab
Asset details pane- Errors tab
Asset details pane- Data Collection tab
Asset details pane- Evaluation tab
Viewing the evaluation results in the details pane
Asset details pane- Tags tab
Applying a tag to the asset
Removing a tag from the asset
Asset details pane- Exceptions tab
Using the Filter by pane in the Asset System view
Risk Rating filter
Select tags filter
Created Between filter
Modified Between filter
Performing the tasks in the Reconciliation Rules view
Editing a reconciliation rule
Moving a reconciliation rule
Copying and pasting a reconciliation rule
Deleting a reconciliation rule
Viewing rules information in the details pane
Using the Filter by pane in the Reconciliation Rules view
Rule Type filter
Asset Type filter
Managing custom schema
About the custom schema
About the Schema Manager view
About the asset type schema
About the entity schema
About the target type schema
Working with custom asset types
Creating a new asset type
Viewing the custom asset type and the custom fields in the asset system
Extending an existing asset type
Creating an external field to add to the asset type
About the platform and the primary entities
About the primary, mandatory, and optional fields
About referenced entity fields
About separators in name fields
Working with custom entity
About platforms
About entities
About fields of an entity
About setting tasks to roles for entity schema
About relationships between the predefined entities
Creating a new entity schema
Extending an existing entity schema
Working with custom target type
Creating a new target type
Editing a target type
Working with custom schema scenarios
Creating a custom asset type - Windows Service
Extending the predefined asset type - Windows Machine
Extending Windows Machine to manage inventory and vendor data information
Create a custom entity- Inventory
Extending Windows Machine to include the fields from Inventory
Creating a custom asset type- Printer based on the custom platform- Devices
Creating a custom platform- Devices and the custom entity-Printer
Creating a custom asset type- Printer
Creating a target type for the asset type - Printer
Managing entitlements
About entitlements
Reasons for managing entitlements
Problems in managing entitlements
About the entitlements system workflow
About the control point status
About the Control Points view
About the My Control Points view
About the Import Settings view
About the Browse Notifications view
About the Review Cycle Settings View
Concepts in entitlements
Control points
Data owners
Alternative approver
Review cycle setting
Approval period
Tagging
Working with control points
Marking an asset as a control point
Control point type and entitlement type
Configuring control points
Creating a review cycle setting
Deleting a review cycle setting
Unmarking a control point
Working with entitlements import
About entitlements import
Configuring the import settings
Configuring the automatic entitlements import
Importing the entitlements manually
Working with approval
Requesting approval of entitlements
Requesting changes in entitlements
Approving the entitlements
Configuring the alternative approver
Comparing entitlements
About the daily approval job
Working with notifications
About the notification events
Configuring notifications
About notification tokens
About the entitlements filters
Control Point Status filter
Tag filter
Viewing the control points information in the details pane
Control point details pane- General tab
Control point details pane- Entitlements tab
Control point details pane- Review Cycle tab
Control point details pane- Tags tab
Control point details pane- Exceptions tab
Control point details pane- Workflow Trails pane
Managing exceptions
Concepts in exception
About exceptions
About the exception management system
About exception validity
About exception templates
About exception states
About the exception filters
About the exception management view
Working with exceptions
Viewing exception information in the details pane
Exceptions details pane - General tab
Exceptions details pane - Associations tab
Exceptions details pane - Tags tab
Exceptions details pane - Workflow Trails tab
Requesting an exception
Requesting an exception for assets on checks
Requesting an exception for control points
Requesting an exception for assets on policies
Launching the Request Exception Wizard
Approving an exception
Approving an exception for assets on checks
Approving an exception for control points
Approving an exception for policies
Setting the exception state to In Review
Setting the exception state to Request Clarification
Setting the exception state to Deny
Setting the exception state to Expire
Modifying an exception
Managing standards
Concepts in standards management
About standards
About predefined standards
Predefined standards for ESM
Predefined standards for Oracle
Predefined standards for SQL
Predefined standards for UNIX
Predefined standards for Windows
About sections
About checks
About data collection jobs
About evaluation jobs
About target types
About SQL predefined target types
About Windows predefined target types
About UNIX predefined target types
About Oracle predefined target types
About ESM data collector target types
About compliance score
About risk score
About gold standard
About versioning scheme
About the standards filters
About policy mapping in ESM
About changing an ESM policy name
Concepts in checks
Field expression
Check expression
Check formula
Preconditions
Data Items filter
Missing data items
Multiple data items
Check risk attributes
Check Advanced Settings
About operators
Field expression operators
Check formula operators
Operators AND and OR
Operator NOT
Operators IF, THEN, ELSE
About the standards view
Working with standards
Viewing standard information in the details pane
Standard details pane - General tab
Standard details pane - Description tab
Standard details pane - Evaluations tab
Standard details pane - References tab
Standard details pane - Tags tab
Standard details pane - Exceptions tab
Standard details pane - Gold Standard Properties tab
About multi-select functionality
Creating a new standard
Copying and pasting a standard
Moving a standard
Importing a standard
Exporting a standard
Renaming a standard
Deleting a standard
Creating an evaluation job
Setting up a data collection job
Changing an ESM policy name at the standard level
Working with sections
Viewing section information in the details pane
Section details pane - General tab
Section details pane - Description tab
Section details pane - References tab
Creating a new section
Copying and pasting a section
Moving a section
Renaming a section
Deleting a section
Changing an ESM policy name at the section level
Working with checks
Viewing check information in the details pane
Check details pane - General tab
Check details pane - Description tab
Check details pane - Expression tab
Check details pane - Parameters tab
Check details pane - Remediation tab
Check details pane - Issue tab
Check details pane - CVE tab
Check details pane - References tab
Check details pane - Exceptions tab
Copying and pasting a check
Moving a check
Renaming a check
Deleting a check
Creating a new check
Modifying a check
Viewing the evidence details
Changing an ESM policy name at the check level
Creating an ESM check
Creating a CCS ESM check by using the Quick Check Builder option
Creating a message expression for a new CCS ESM check
Adding the policy name and the module name data filters for a new CCS ESM check
Creating an ESM error expression for a new ESM check
Editing the check formula for a new CCS ESM check
Creating a CCS ESM check by using the Advanced Check Builder option
Specifying the content for a new CCS ESM check
Working in the details pane
Specifying or editing the description
Specifying or editing the check issue
Specifying or editing the remediation information
Adding the CVE information
Editing the CVE information
Specifying or editing the check attributes
Adding reference information
Editing reference information
Deleting reference information
Working with gold standard
Gold standard concepts
Creating a gold standard
Gold standard job
Resolving checks in a gold standard
Using the Manual Review dialog box
Working with Evaluation Results
About exporting the evaluation results
Exporting the evaluation results
Requesting an exception using the Evaluation Result Details dialog box
About risk calculations
Base score calculation
Adjusted base score calculation
Risk score calculation
Average risk score calculation
Managing baselines
About baseline
About the baselines workflow
About the Baselines view
About setting tasks to roles of baselines
Creating a baseline job
Viewing the comparison results in the Baselines view
Deleting the baseline record
Managing tags
About tags
Tags Management View
Creating a new tag
Creating a new tag category
Editing a tag category
Deleting a tag category
Moving a tag
Deleting a tag
Renaming a tag
Managing policies
About Policies
About the policy life cycle
About policy status
About audiences
About regulations
About frameworks
About control statements
About policy versioning
About the policies management view
About editing policies
About searching policies
Working with policies
Creating a new policy
Importing a Word policy
Moving a policy
Deleting a policy
About selecting the policy audience
About reviewing policies
About policy review
Reviewing a policy
Viewing the reviewer comments
About mapping policies
About publishing policies
Approving a policy
Publishing a policy
Unpublishing a policy
Responding to policies on the Web Portal
Accepting or declining a policy
Printing a policy from the Web Portal
Managing clarifications
About clarifications
About the clarifications management view
Managing clarification requests
Monitoring jobs
About jobs
About the job types
About the job filters
About the jobs view
Managing jobs
Editing job
Scheduling jobs
Deleting jobs
Running a job now
Searching for a job
Refreshing the jobs view
Creating jobs
Managing job runs
Canceling a job run
Deleting a job run
Viewing jobs information in the details pane
Jobs details pane- General tab
Jobs details pane- Schedule tab
Job run details pane- Summary tab
Job run details pane- Failures tab
Jobs details pane- Template tab
Monitoring evaluation results
About the Evaluation Results view
About the evaluation result filters
Viewing evaluation jobs in the details pane
Evaluation Results details pane - General tab
Evaluation Results details pane - Evaluation Summary tab
Evaluation Results details pane - Assets Evaluated tab
Managing reports
About the Control Compliance Suite reports
About the Reports Templates view
About the Dashboard Templates view
About the My Reports view
About the My Dashboards view
About predefined report templates
About data synchronization
About the Report Management jobs
About the View My Reports filter option
Predefined report and dashboard descriptions
Working with reports
Copying a report template
Customizing a report template
Customizing a report in View My Report - Reporting
Removing a report
Deleting a report template
Viewing a report
Printing a report
Exporting a report
Refreshing a report
Scheduling a report
Editing a report generation job
Working with dashboards
Scheduling a dashboard
Viewing a dashboard
Editing a dashboard update job
Exporting a dashboard
Removing a dashboard
Using custom content
Using the custom content tool
About custom content
About mandates
About custom control statements
About Content Studio
About the Content view
Creating a custom mandate
Modifying a mandate or section
Creating custom control statements
Mapping control statements to mandates
Mapping policies to control statements
Mapping checks to control statements
Mapping questions to control statements
Mapping control statements to third-party evidence
Using third-party evidence
About the Evidence Management system
About the Evidence Management View
About a custom evidence provider
General sequence of configuring an evidence provider
Creating a CSV file for evidence data collection
About CSV file fields for evidence data collection
Associating a data location with the evidence provider
About setting tasks to roles for evidence collection
Adding a custom evidence provider
Modifying a custom evidence provider
Deleting a custom evidence provider
Troubleshooting
About troubleshooting
Glossary terms
Documentation Home