[GOLD]
Symantec Control Compliance Suite
Symantec

Symantec Control Compliance Suite garnered the gold, winning high marks from readers for its ease of installation, configuration and administration. The product also drew raves for vendor service and support. Symantec Control Compliance Suite is a group of integrated products that combines point-in-time controls assessment and real-time monitoring of risks and threats to reduce compliance costs.

[SILVER]
Tripwire Enterprise
Tripwire

Readers awarded the silver to Tripwire Enterprise, rating it highly for its granular and flexible policy management definition capabilities. The product also scored well in several other areas, including its ability to effectively identify policy violations and its reporting and alerting capabilities. Tripwire Enterprise combines configuration assessment and change auditing in a s...

[BRONZE]
ArcSight Network Configuration Manager (NCM)
ArcSight

ArcSight Network Configuration Manager (NCM) earned the bronze, winning praise from readers for its granular and flexible policy management definition capabilities. Readers also liked the product for its ease of installation and administration and its return on investment. ArcSight NCM is an appliance to centrally manage network configurations, monitor compliance, and reduce workload through task automation.

[TRENDS]
"In general, policy and risk management are still two separate areas and both are showing quite a bit of promise. Policy management is further along in maturity. More maturity in risk management practices will ultimately be necessary to help move security [professionals] up the chain of command and give them more exposure and higher priority in the business." -- Chris McClean, analyst, Forrester Research