Professional Services
.

Proven implementation and customization services
Guardium’s professional services group works closely with customers to rapidly deploy our solution using a proven implementation process.

During this process:

  • We compile your requirements using our templates and tools, which are derived from best practices developed from working with hundreds of organizations
  • We deliver a Statement of Work (SOW) and a detailed deployment plan for each implementation
  • The installation process is simple and often completed by customers themselves, with telephone and Web conference support from Guardium
  • Within a few hours, you can begin collecting data and producing security and auditing reports in your production environments
  • Implementation time is shortened because the Guardium system begins collecting data as soon as it has visibility to the database traffic (via connection to a SPAN port, network TAP, or host-based S-TAP probe)
  • Guardium technology supports enterprise standards (LDAP, SNMP, SMTP, Syslog, etc.) for quick integration with your existing infrastructure
  • The Guardium solution comes with 100+ predefined reports that can be easily customized to meet your requirements for security, internal audit, policy management, and compliance (SOX, PCI, data privacy)

Professional services consultants are available to assist customers during implementation. Our consultants bring a wealth of knowledge and deep proficiency in the following areas, based on their experience with multiple deployments:
  • Enterprise requirements analysis
  • Capacity planning
  • Statements of Work (SOW)
  • Project management for enterprise-wide deployments (distributed data centers, heterogeneous environments, high transaction volumes, etc.)
  • Best practices consultation
  • Customized creation of reports, alerts, policies
  • Mapping organization-specific audit and compliance requirements to custom policies and reports
  • Consultation sessions
  • Performance optimization
  • Integration with custom and third-party applications (e.g., SIEM, change management systems, mainframe logging)
  • QuickStart onsite training

Continuous Improvement Program
The continuous improvement program is designed to provide organizations with periodic reviews of their database security and auditing policies, compliance reporting procedures, security assessments and metrics, and Guardium system configurations.

We recommend that customers initially implement this package approximately six months after completing their implementations.  The program allows customers to optimize the benefits of Guardium’s solution and continuously refine their installation to address evolving requirements and data center environments.

Guardium offers the following services as required:

  • Onsite visits from your service account manager
  • Project status meetings
  • Policy refinement
  • Baseline generation and merging of new baselines
  • Threshold alert tuning based on observed database activity
  • Verification of automated report distribution and compliance workflow process (including electronic sign-offs)
  • Fine-tuning of reports
  • Review of security exceptions (SQL errors, failed logins, etc.) with diagnostics and recommended actions
  • Verification of data archiving and data purging procedures for Guardium appliances
  • Review of user roles, security, and system usage
Specific deliverables include:
  • Remote consultations
  • Quarterly on-site visits by a Guardium professional services consultant
  • Trip reports for each on-site visit
  • Quarterly project summaries
For more information on Guardium’s professional services, please .