Administer > SA Core and component security > Enable risk mitigation on the SA network

Enable risk mitigation on the SA network

New vulnerabilities are constantly being reported. The SA Network is a unique service that makes actionable, multi-vendor, prioritized, security alerts available to your SA installation. With the SA Network, you can identify vulnerabilities as soon as you learn about them, and deploy the appropriate fixes without consuming extra resources.

Recognizing that no single standard covers all needs, the SA Network provides a broad collection of compliance policies that are easily customizable and extensible to meet each customer's specific needs.

The SA Network currently focuses on the following three compliance standards:

  • Center for Internet Security (CIS) standards: A set of standards that detail how to secure a server based on operating system. (http://www.cisecurity.org/)
  • Microsoft (MS) Security Guide: A standard established by Microsoft that details the configuration settings to harden Windows servers. (http://www.microsoft.com/)
  • National Security Agency (NSA) Security Configuration Guide (SCG): A standard established by the United States National Security Agency that details the configuration settings to harden different OSs and applications. (http://www.nsa.gov/)