You've missed an important feature. Remedy interfaces very well with the database of your choice (it likes Oracle) and there are APIs to interface the data directly (with say ARPerl). Connecting it to your enterprise database for lookups is easy. Service Center doesn't deal well with concept that your data might change through any interface other than SC.
One thing that may help is if there was some independant firm that could give a qualitative and quanitative measurement of a company's security. These independant firms could review patch logs, sys admin proceedures, backup procedures, and employee training materials. They could also perform more intrusive audits, using a standard set of tools (upgraded quarterly) to attempt to infiltrate the organization. At the end, they could then give some sort of ranking, to let a company know what bases have been covered and how they rank with others in the industry.
Try looking at http://www.cisecurity.org The benchmark tools give a simple score (out of 10). The tools are still pretty new, but are a good starting point for a security audit.
Slashdot Mirror
You've missed an important feature. Remedy interfaces very well with the database of your choice (it likes Oracle) and there are APIs to interface the data directly (with say ARPerl). Connecting it to your enterprise database for lookups is easy. Service Center doesn't deal well with concept that your data might change through any interface other than SC.
One thing that may help is if there was some independant firm that could give a qualitative and quanitative measurement of a company's security. These independant firms could review patch logs, sys admin proceedures, backup procedures, and employee training materials. They could also perform more intrusive audits, using a standard set of tools (upgraded quarterly) to attempt to infiltrate the organization. At the end, they could then give some sort of ranking, to let a company know what bases have been covered and how they rank with others in the industry.
Try looking at http://www.cisecurity.org The benchmark tools give a simple score (out of 10). The tools are still pretty new, but are a good starting point for a security audit.