Measure, Share, Compare.

ClearPoint automates the entire process of designing, calculating, and communicating IT security performance and compliance indicators from real data collected across applications and your organization.

Start by picking metrics and scorecards from our extensive Catalog; collect data via our metric forms, and share your results securely with your stakeholders.  Later download our automated metric collection and calculation app and securely access data from any security application, server, or network device and transform the raw data into usable performance assessment information. As needed, add alerts and notifications to let stakeholders know when policy thresholds are reached. With ClearPoint, you can distribute responsibility for data collection, control monitoring, and assessment annotation.

• ClearPoint Catalog
  The Catalog is your source for pre-packaged, field-tested Metric Apps. We’ve already done the hard work of creating useful metrics and scorecards that are easily customized, mapped to your organization's assets classes, risk profile, and organization structure. All packages are based on extensive field research by our metrics experts and mapped to industry best practice frameworks (ISO and COBIT) and compliance regimes (PCI, NERC, SOX, HIPPA). The Catalog delivers the know-how you need to ensure that you measure what matters most and communicate effectively with all levels of your organization.


• Metric Apps
  Each ClearPoint Metric App delivers metrics, scorecards, and data collectors optimized for a specific information security product. Metric Apps are ready for you to plug into your data sources, including Qualys, nCircle, McAfee, Symantec, and Microsoft AD.


• Assessment Manager
  This web-based service portal is a one-stop-shop for configuring and scheduling your Metric Apps. Create unique user views to filter by role which assessments end-users see;  ClearPoint easily integrates with LDAP and Active Directory to map groups and roles.  Group and classify assessments based on asset scopes that you specify. Schedule metric operation and scorecard publishing, set target policy values for your metrics, and set alerts based on policy values.


• Data Calculation Apps
  When you're ready for a fully automated solution, download our light footprint, minimally intrusive, read-only data collection and calculation apps.  A Data Calculation App automatically collects the data inputs it needs, performs its calculations, and stores only the details you request.  Your metrics results are securely forwarded to your central metrics results database for refinement and visualization.  Data Calculation Apps offer broad coverage and easy access to vendor-specific products including:
  
  • User directory services
  • Asset management systems
  • Network & system management solutions
  • Human resource applications
  • Ticketing systems
  • Threat management solutions for intrusion detection & prevention
  • AntiVirus systems
  • Incident management systems
  • Vulnerability scanners & management solutions
  • Patch management tools


• Metric Design Studio
  The Studio is an intuitive drag-and-drop environment that enables security analysts to easily create, test, and deliver custom metrics and scorecards.  Express business logic, define access to data sources, design visuals -- with no programming skills needed. Designed for the security analyst with a spreadsheet skill set, with the Studio you're in control.