Wednesday, November 18, 2009

Auditing Noise pt. 1

One of the major problems with any auditing system is Auditing Noise. FileSure's approach to addressing this problem is to "collapse" duplicate events within a certain time frame. By default, if the same user opens the same file, with the same program, requesting the same rights within 60 minutes of the first request, the second will be ignored.

In our conversations with Auditors, they said that if the same user accesses the same file in the same day, it only needs to be recorded once. FileSure is more granular than that by default (same file, same user, same program, same access within an hour) and can even be configured to be even more so, down to the point that only duplicate events will be ignored if they occur within the same minute. The default of 60 minutes seems to be to more that’s satisfactory for most companies.

No comments: