Using Automated Policies for SaaS Governance and Compliance
Download as pptx, pdf0 likes249 views
The document provides an overview of automated policies for SaaS governance and compliance, detailing how these policies check conditions, create incidents, and take actions based on defined triggers. It highlights Flexera's differentiators, including a flexible policy engine that aids in compliance reporting and risk management for SaaS applications. The document also discusses sample policies for SaaS management and emphasizes the need for effective governance to combat SaaS sprawl and unauthorized usage.
Using Automated Policies for SaaS Governance and Compliance
- 1. ©2019 Flexera / Company Confidential 1 USING AUTOMATED POLICIES FOR SAAS GOVERNANCE AND COMPLIANCE S e p t e m b e r 2 0 1 9
- 2. ©2019 Flexera / Company Confidential 2 Speakers HARISH SUKHAVASI SENIOR PRODUCT MANAGER PAUL PIESKE SENIOR PRODUCT MARKETING MANAGER
- 3. ©2019 Flexera / Company Confidential 3 Housekeeping This session will be recorded Participants’ lines are muted To ask a question, type it in the chat box located on the bottom right of your screen This webinar is being played in broadcast audio mode; please use your computer speakers to join
- 4. ©2019 Flexera / Company Confidential 4 AGENDA 1. Introduction to policies 2. Breaking down a policy 3. Flexera differentiators 4. Sample SaaS Manager policies 5. Q and A
- 5. ©2019 Flexera / Company Confidential 5 01 INTRODUCTION TO POLICIES
- 6. ©2019 Flexera / Company Confidential 6 Policy Basics – What Policies Do 1. Checks for a Condition 2. Create an Incident if the Condition is met 3. Takes an Action on the Incident
- 7. ©2019 Flexera / Company Confidential 7 Policy Basics – What Policies Do 1. Checks for a Condition … What’s a “Condition”? • Could be anything … • Your cloud spend is above your budget • You’ve got more Oracle licenses in use than you’ve paid for • You have a Salesforce user that is not on your HR roster • So long as the data from which a condition is determined is available via an API, you’re good to go!
- 8. ©2019 Flexera / Company Confidential 8 Policy Basics – What Policies Do 1. Checks for a Condition 2. Create an Incident if the Condition is met 3. Takes an Action on the Incident
- 9. ©2019 Flexera / Company Confidential 9 Policy Basics – What Policies Do 1. Checks for a Condition 2. Create an Incident if the Condition is met 3. Takes an Action on the Incident … what type of Action? • Could be simple; could be complex … • Sends and email or posts a notification in Teams • Launch new cloud Servers, deploy code to them, determine if they are eligible for software license and terminating on- prem servers. • And, Actions can include Flexera’s Cloud Workflow which enable complex procedures to be handled
- 10. ©2019 Flexera / Company Confidential 10 02 BREAKING DOWN A POLICY
- 11. ©2019 Flexera / Company Confidential 11 Policy Basics – Breaking Down a Policy CMP/Optima SaaS Manager FlexNet Management Suite IT Administrator Security Administrator Compliance Officer Server launches User logs into app Licenses in use Server is oversized User not on HR roster Over subscribed Re-size instance Revoke access Send report
- 12. ©2019 Flexera / Company Confidential 12 03 FLEXERA DIFFERENTIATORS
- 13. ©2019 Flexera / Company Confidential 13 Works with any service, any cloud, anything with an API B read th Flexera Differentiators
- 14. ©2019 Flexera / Company Confidential 14 Remediate issues automatically or after manual approval Works with any service, any cloud, anything with an API B read th Flexera Differentiators Orch estrated Action s
- 15. ©2019 Flexera / Company Confidential 15 Extensible language to build your own policies and configurations Remediate issues automatically or after manual approval Works with any service, any cloud, anything with an API B read th Flexera Differentiators Orch estrated Action s Po licies -as - Cod e
- 16. ©2019 Flexera / Company Confidential 16 Out-of-the-box and open-source catalog of policies Extensible language to build your own policies and configurations Remediate issues automatically or after manual approval Works with any service, any cloud, anything with an API B read th Flexera Differentiators Orch estrated Action s Po licies -as - Cod e T ime to Valu e
- 17. ©2019 Flexera / Company Confidential 17 Flexera Policies are Applicable to all Solutions OptimaSaaS ManagerFlexNet Manager Policies Cost, Compliance, Security, Operations IT Optimization Dashboard* *Coming in 2019 CMP Data Platform + Content Packs + Foundation App Broker Visibility INSIGHTS Analysis Management Optimization SPEND Governance Self-Service AGILITY Control On-Premise SaaS Cloud INTEGRATION CloudScape
- 18. ©2019 Flexera / Company Confidential 18 04 SAAS MANAGER POLICIES
- 19. ©2019 Flexera / Company Confidential 19 Compliance Reporting and Policies Flexera SaaS Manager (FSM) has a flexible and extensible Policy Engine that allows companies to control the risk of SaaS sprawl and shadow SaaS. Flexera delivers SaaS compliance and Governance GET NOTIFIED WHEN: • A user purchases unauthorized SaaS applications • A user leaves the company • A user exceeds their license usage • A Business Unit (exceeds their SaaS budget) And • Auto provision user to a lower cost license (E2) when inactive
- 20. ©2019 Flexera / Company Confidential 20 API support for Policy Scripts • Currently 8 policies published • More policies underway: • ServiceNow • Salesforce • O365 SaaS Manager Policies
- 21. ©2019 Flexera / Company Confidential 21 Policy - Subscriptions A single policy, which exports on a recurring basis, a table with a list of ServiceNow Application name, Types, Start and End date, how many purchased and how many allocated.
- 22. ©2019 Flexera / Company Confidential 22 Policy – Application Overallocation/Under Allocation Alert A single policy, which notifies via email, when a ServiceNow application’s Allocated users comes within a defined threshold of the Purchased users.
- 23. ©2019 Flexera / Company Confidential 23 Policy- Suspicious Users Alert – Unauthorized App Access A single policy, which exports on a recurring basis, (definable) users that are accessing applications but are not part of the HR Roster or IT Roster
- 24. ©2019 Flexera / Company Confidential 24 Policy: User HR Status Change Alert
- 25. ©2019 Flexera / Company Confidential 25 THANK YOU For additional SaaS Manager resources such as webinars, white papers, and e-books, visit: https://saas.flexera.com/
- 26. ©2019 Flexera / Company Confidential 26 Q&A V i s i t f l e xe ra . c o m t o : C o n t a c t u s J o i n o u r c u s t o m e r c o m m u n i t y L e a r n h o w o u r s o l u t i o n s c a n h e l p
- 27. ©2019 Flexera / Company Confidential 27 ABOUT FLEXERA Flexera gives companies clarity into their technology “black hole,” helping business leaders turn IT insight into action. With a portfolio of integrated solutions that deliver unparalleled technology insights, spend optimization and agility, Flexera helps enterprises realize IT’s full potential to accelerate their business. To learn more, visit flexera.com