Compliance & Evidence

Evidence, not screenshots

Audits usually mean weeks of collecting screenshots. Uplivra does that work continuously. Every day it tests the controls it can check on its own and saves each result as dated, hash-chained evidence, such as:

• every device has an owner, and hardware lifecycle and warranty are recorded;
• discovery scans run on schedule to find unknown devices;
• people use two-step sign-in, and access reviews are done on time;
• administrative actions are recorded in an audit log that's kept;
• device configurations match your baselines, for example "Telnet is off" or "SNMPv1 is disabled".

Mapped to your frameworks

Choose the frameworks you follow: NIST Cybersecurity Framework 2.0, HIPAA Security Rule, SOC 2, PCI DSS and CIS Controls v8. Each control shows its references in every framework, its status (passing, failing or needs a document), and exactly what Uplivra found.

Findings, baselines and access reviews

• Findings list what needs fixing, with the devices affected.
• Configuration baselines check saved device configurations against common rules or your own.
• Access reviews walk a manager through confirming who should still have access, and record the decision.

The audit package

When the auditor asks, download the audit package: every control, its evidence and history for the period, in one export.

Pricing

$5 per device per month, for the devices in scope. For systems in a PCI cardholder data environment, see PCI CDE Monitoring.