--- title: Risk Management and Compliance Solutions url: https://www.vmware.com/resources/compliance-risk-management description: VMware risk and compliance solutions enable consistent security operations across data centers, clouds, and edge locations to protect applications and data. --- # Risk Management and Compliance Solutions VMware risk and compliance solutions enable consistent security operations across data center, cloud, and edge locations to protect applications and data wherever they live. WATCH THE VIDEO (12:41) ## Elevate Risk Management and Compliance Focus on your application experience, rather than worrying about the security of your infrastructure and data. By architecting security controls directly into the [Hypervisor](https://www.vmware.com/topics/hypervisor), VMware enables you to operate with consistent security across data center, cloud, and edge. You’ll better manage security risk and compliance, and you’ll be protecting applications and data wherever they live. ### Reduce HIPAA & PCI Compliance Risk with VMware NSX Change the way you secure the applications in your environment by enabling a zero-trust security model via micro-segmentation. Then go further: reduce the scope of compliance by isolating the systems that store, process or transmit sensitive data. VMware NSX enables a fundamentally more secure environment and helps to ensure and demonstrate compliance with many regulations, including PCI DSS, HIPAA, GDPR, FedRAMP, SOC, CJIS, DISA, STIG, and more. ## Mitigate Risk, Drive Compliance ### Drive Visibility and Context Gain visibility across application infrastructure and data center endpoints, enabling validation of configuration and real-time state against regulatory controls. ### Solve for Risk Fragmentation Simplify security with security controls architected directly into the hypervisor. ### Reduce Compliance Scope Lower the scope of compliance and cut down overall audit durations by isolating the systems that store, process, or transmit sensitive data. ## Related Risk & Compliance Resources ### VMware NSX Security Configuration Guide Learn how to deploy and operate VMware NSX in a secure manner. - [Download Configuration Guide](https://communities.vmware.com/docs/DOC-28142) ### VMware NSX Micro-segmentation Day 1 Guide Implement NSX for added security and visibility via micro-segmentation. - [Download Guide](https://www.vmware.com/docs/vmware-nsx-microsegmentation) ## We’re Powering Our Customers’ Success ### City of North Las Vegas Delivers Security and Compliance To better enable and protect its agencies, the city relies on virtualized infrastructure from VMware for all its services. ### West Bend Mutual Insurance Reduces Risk with NSX West Bend Mutual leverages VMware NSX for preventative controls to secure sensitive data and mitigate risk. - [Check out more customer stories](https://www.vmware.com/resources/customers) ## VMware Delivers Compliance for Key Regulations ### FIPS NSX Data Center can be configured to operate in FIPS compliant mode with FIPS 140-2 validated cryptographic modules. A FIPS compliance report helps configure and operate NSX deployments securely while adhering to prescribed FIPS standards. See [NSX-T Data Center Compliance-Based Configuration](https://docs.vmware.com/en/VMware-NSX-T-Data-Center/2.5/administration/GUID-4DC676D9-DE14-403E-A861-3AA2ECA56FDF.html) for the list of cryptographic modules used in NSX-T Data Center that are validated for FIPS 140-2. ### Common Criteria NSX Data Center for vSphere 6.3.0 has been tested for compliance with the EAL2+ level of assurance. Running a Common Criteria-compliant NSX Data Center installation requires that you configure NSX Data Center as explained in the document Configuring NSX for Common Criteria as part of the NSX Data Center Administration Guide. ### ICSA This is an industry-wide accepted standard certification which tests and certifies products including anti-virus, firewall, IPSec VPN, cryptography, SSL VPN, network IPS, anti-spyware, and PC firewall products. Both NSX Data Center for vSphere Distributed Firewall and Edge Firewall are certified against ICSA Corporate Firewall criteria. ### PCI Compliance Other standards such as NIST 800-53, IRS 1075, and MARS-E are mostly related to processes, procedures, or policies with Access Control/RBAC and Auditing being the applicable sections to NSX Data Center. For specific product details, refer to: VMware Product Applicability for PCI DSS. ## GDPR Compliance As of May 25, 2018, the General Data Protection Regulation (GDPR) is enforceable in the European Union. VMware’s portfolio of technology and services can help customers implement solutions for data protection use cases, which in turn may form part of an organization’s efforts to comply with the GDPR. ### IT Management and the GDPR: The VMware Perspective Find out where the VMware portfolio can help you implement solutions for data protection use cases in the context of the GDPR. ### GDPR and Addressing Data Security Gaps with VMware Advance your GDPR readiness by reviewing your handling of personal data and your enforcement of processes to protect that data. ## Expand Your Virtual Cloud Capabilities ### Transform Your Business Learn about a new approach to building and operating a single virtual cloud network for all your apps and data, wherever they run. ### Deliver Intrinsic Security Leverage adaptive, [intelligent protection](https://www.vmware.com/solutions/security) and deep visibility to secure apps and workloads in your data centers, clouds, and endpoints. - [More on Enterprise Security Solutions](https://www.vmware.com/solutions/security) ### Build on a Foundation of NSX Connect and protect applications across your data centers and clouds with [virtualized networking and security](https://www.vmware.com/products/cloud-infrastructure/nsx) via VMware NSX. - [More on NSX](https://www.vmware.com/products/cloud-infrastructure/vcf-networking) ### Leverage Global Visibility Enhance your management of network traffic and security protections with 360 degree visibility across all your environments. - [More on VMware Aria Operations for Networks](https://www.vmware.com/products/cloud-infrastructure/vcf-operations-for-networks) ## Dive Deeper into VMware Risk & Compliance ### Learn & Evaluate - [Micro-segmentation for Dummies](https://www.vmware.com/home) - [Operationalizing Security with NSX Micro-segmentation Day 1 Guide](https://www.vmware.com/docs/vmware-nsx-microsegmentation) - [ESG Lab Review: Networking and Security Benefits with VMware NSX](http://research.esg-global.com/reports/VMwareNSXNetworkVirtualizationPlatform/files/ESG-Lab-Review-VMware) ### Security Validations - [VMware NSX DMZ Anywhere Cybersecurity Benchmark](https://communities.vmware.com/docs/DOC-36982) - [NSX Micro-segmentation Cybersecurity Benchmark](https://communities.vmware.com/docs/DOC-32904) - [Addressing PCI DSS with VMware NSX-T](https://communities.vmware.com/docs/DOC-36983) - [Coalfire Micro-segmentation Benchmark Report Validates VMware NSX Capabilities Enable a Zero-Trust Model](https://www.coalfire.com/News-and-Events/Press-Releases/First-Micro-Segmentation-Validates-VMware-NSX) - [STIG Validates NSX to Meet the Security Hardening Guidance Required for Installment on DoD Networks](https://news.vmware.com/releases/newly-released-stig-validates-vmware-nsx-meets-the-security-hardening-guidance-required-for-installment-on-department-of-defense-dod-networks) ### Plan & Design - [VMware SDDC Product Applicability Guide for FedRAMP v1.0](https://www.vmware.com/docs/vmware-product-applicability-guide-for-fedramp-v1-0) - [VMware NSX Security Configuration Guide](https://communities.vmware.com/docs/DOC-28142) [VMware NSX and Compliance](https://players.brightcove.net/6415665063001/83iWkhhmz_default/index.html?videoId=6348420661112) — 12:39, published 2024-05-08