Abstract: Methods, apparatus, and processor-readable storage media for generating security policies for end-user devices using group rankings and partial policy determinations are provided herein. An example computer-implemented method includes ranking end-user device groups within an enterprise, wherein each of the groups is associated with one or more security-related policy settings; assigning a given end-user device to two or more of the groups based on device parameters attributed to the given end-user device; generating a policy for the given end-user device by performing partial policy determinations across the two or more groups to which the given end-user device is assigned, wherein performing the partial policy determinations comprises defining, in an order based at least in part on the ranking of the groups, security-related settings from the two or more groups, until all security-related settings required by the policy are defined; and outputting the policy to the given end-user device.

Abstract: Methods, apparatus, and processor-readable storage media for generating security policies for end-user devices using group rankings and partial policy determinations are provided herein. An example computer-implemented method includes ranking end-user device groups within an enterprise, wherein each of the groups is associated with one or more security-related policy settings; assigning a given end-user device to two or more of the groups based on device parameters attributed to the given end-user device; generating a policy for the given end-user device by performing partial policy determinations across the two or more groups to which the given end-user device is assigned, wherein performing the partial policy determinations comprises defining, in an order based at least in part on the ranking of the groups, security-related settings from the two or more groups, until all security-related settings required by the policy are defined; and outputting the policy to the given end-user device.

Abstract: Methods, apparatus, and processor-readable storage media for out-of-band management security analysis and monitoring are provided herein. An example computer-implemented method includes generating control state configuration profiles for hardware components of at least one out-of-band server management controller, collecting data from the at least one out-of-band management controller via one or more interfaces, analyzing the collected data by comparing the collected data to the one or more control state configuration profiles and applying at least one rule-based engine to the collected data, and generating a notification of one or more security vulnerabilities associated with the at least one out-of-band server management controller based at least in part on the analyzing of the collected data, wherein the notification is to be utilized in connection with one or more security-related actions on at least a portion of at least one server.

Abstract: Methods, apparatus and articles of manufacture for generating a heat map to identify vulnerable data users within an organization are provided herein. A method includes comparing each of one or more items of data against a set of one or more pre-configured data sensitivity parameters to detect one or more sensitive data operations within the one or more items of data, generating an alert corresponding to each of the one or more sensitive data operations, wherein the alert provides one or more items of information pertaining to the corresponding sensitive data operation, and processing the one or more alerts to generate a heat map representing an association between each of multiple users and the one or more sensitive data operations usage.