FISMA News

nCircle Solutions Automate Configuration and Security Assessment to Meet OMB Standards

(Sept 25, 2008)-- nCircle announced the Security Content Automation Protocol (SCAP) certification of nCircle Configuration Compliance Manager as a Federal Desktop Core Configuration (FDCC) Scanner and as an Authenticated Configuration Scanner. As the world's leading agentless configuration auditing solution, nCircle Configuration Compliance Manager provides U.S. Federal agencies with an enterprise class system to support the largest networks, while at the same time delivering SCAP certified FDCC scanners with the ability to audit and assess a target system in order to determine its compliance with the Federal Desktop Core Configuration (FDCC) requirements.

SCAP is the common content that enables the multi-vendor automation of vulnerability management, measurement, and policy compliance evaluation (e.g. FISMA compliance) and is sponsored by the Information Security Automation Program (ISAP), a U.S. government multi-agency initiative to enable automation and standardization of technical security operations. The U.S. Office of Management and Budget (OMB) issued a mandate that all government agencies must meet a core configuration standard for desktop computers, with an objective to improve overall system security and reduce costs through standardization. The OMB mandate is furthering the adoption of SCAP to enable security technologies to read and exchange systems and vulnerability information in a common format. This provides the foundation for interoperability among security and compliance products, ultimately delivering a more secure environment.

"nCircle is pleased to add this FDCC Scanner certification to our other SCAP-certified products and we will continue our involvement in defining and evolving the standards that make up SCAP: OVAL, CVE, CCE, CPE, CVSS, and XCCDF," said Tim Keanini, Chief Technology Officer at nCircle. "Our security risk and compliance management suite helps government agencies improve security and achieve their OMB requirements at the lowest possible cost and our agentless architecture is well suited as these standards move from the desktop to servers and network infrastructure devices."

Additional information about nCircle is available at http://www.ncircle.com.

Share or bookmarklet this web page at: