FISMA News

Shavlik Technologies Secures NASA SEWP Contract

(May 28, 2008)-- Shavlik Technologies announced that the company’s security products have been included in a multi-year contract under the NASA Solutions for Enterprise-Wide Procurement (SEWP IV) Program. This Government-Wide Acquisition Contract makes Shavlik’s full security solution suite available to Federal Government customers who need to fully comply with new FISMA reporting requirements from the US Federal Government.

The Shavlik Security Suite leverages the Security Content Automation Protocol (SCAP), which uses specific standards to simplify and automate vulnerability management, measurement, and policy compliance evaluations. Two components of the Shavlik Security Suite, NetChk Protect for vulnerability management, and NetChk Compliance for security configuration management, are already SCAP compliant to support government initiatives for standards-based security automation.

“Shavlik’s security solution suite is ideal for Federal Government users who are concerned about both security and compliance requirements,” said Todd Rogers, Director of Federal Sales, Shavlik Technologies. “This NASA SEWP IV Contract provides the ability to quickly and easily respond to the needs of our current customers such as The State Department, US Army, US Air Force, Department of Interior, Department of State, Department of Education, and Department of Justice, and extend our reach to new customers in the Federal Government space.”

The Federal Information Security Management Act (FISMA) of 2002 mandates yearly audits of government agency IT controls. FISMA recently changed its reporting requirements to now include proof of compliance with specific system configurations as defined by the National Institute of Standards and Technology (NIST) and referred to as the Federal Desktop Core Configuration, or FDCC. By March 31, agencies must submit a technical report to NIST and OMB demonstrating the status of their implementations.

The Shavlik Security Suite provides a simple and sustainable solution for agencies to generate and distribute approved system baseline configurations and security policies, and then prove compliance with those policies. Shavlik has a FDCC policy template for its customers that can be downloaded from the Shavlik web site and used to compare existing policies and configurations against the NIST standards.

Share or bookmarklet this web page at: