Token Security Guy is now Token GRC Guy...well, kinda

After a lengthy absence, there's been some stuff going on here at RSA that's got the creative juices a-flowing again!

Many of you might have seen yesterday's coverage of RSA buying Archer Technologies. I for one am *really* excited about this - and I mean genuinely excited...not that feigned "office excitement" when you're convincing yourself to do things you'd rather not do (e.g. "I'm really excited about this all-day planning exercise!")

From a nuts and bolts security standpoint, I reckon it's got the potential to set EMC apart as the leaders in security management.We can start raising the conversation around security management away from just managing settings and rules and towards the hard stuff - helping security folks understand what's been done, what needs doing and why they're doing it.

Don't get me wrong, I know managing 15 different consoles is time consuming and labor intensive, but if we don't do a better job at highlighting and dealing with the problems we come across, we're never going to get the investment to solve the technical issues that underlie them.

Archer's going to help us:

• Display policies more intuitively, and more explicitly make the link between what the policy is and why the policy is in place
• Display data around how well the policies are working in a diverse environment
• Create more robust processes around how to deal with issues, like audit findings or security incidents

There's a slew of other stuff its going to let us do in the wider GRC space, but I think a layman's explanation of what GRC does would help to lay out exactly how it would help, and I'll be covering that in the next few posts.