Government Cloud Authors: Elizabeth White, Pat Romanski, Dana Gardner, Liz McMillan, Gopala Krishna Behara

Related Topics: Government Cloud

News Feed Item

Shavlik Security Suite Receives SCAP Validation from NIST

Shavlik Technologies' Validated Security and Compliance Solutions Deliver Standardization Benefits for Government and Commerc

Shavlik Technologies, the market leader in delivering software solutions that rapidly accelerate and continuously improve security and compliance readiness, today announced that the Shavlik Security Suite has earned Security Content Automation Protocol (SCAP) validation, a U.S. government-mandated initiative for standards-based security automation.

The SCAP protocols enable security software technologies to exchange system configuration controls and vulnerability information in a standard format. This ensures that security-related content can be accurately and consistently processed within any SCAP-validated tool. SCAP validation gives government customers the freedom to select a best-of-breed solution that meets their needs and satisfies federal security initiatives and regulations. The Shavlik Security Suite delivers an SCAP Edition that is one of few SCAP-validated tools that simplifies and automates both assessment and remediation.

“The SCAP protocols help an organization in any industry to better define their security configuration boundaries,” said Dorian Cougias, founder and lead analyst for Unified Compliance Framework. “Shavlik’s advanced discovery capabilities mean that you have immediate access to what operating system a machine is running, which is critical to setting configuration boundaries.”

The first real world application of the SCAP protocols is the Federal Desktop Core Configuration, or FDCC, that requires federal agencies to meet core configuration standards for desktop computers running Windows XP or Vista. By delivering a fully-automated solution, the Shavlik Security Suite increases the level of security while also reducing costs for maintaining systems and software applications.

“The Shavlik implementation offers one of the cleanest XML specifications for SCAP of all the products I’ve seen,” added Cougias.

"Shavlik is committed to providing the most advanced and comprehensive security management solutions for Federal Government IT users who are facing a myriad of requirements and need a streamlined path to compliance,” said Todd Rogers, director of federal sales, Shavlik Technologies. The Shavlik Security Suite provides a simplified and sustainable solution for agencies to generate and distribute approved system baseline configurations and security policies, and then prove compliance with those policies.

However, Shavlik leaders predict that government users are not the only organizations who will benefit from such solutions.

"While SCAP began as a U.S. government multi-agency initiative to help government agencies meet regulatory requirements such as FISMA and FDCC, the gains in operational efficiency and cost savings made by our simplification of complex network security using SCAP also provides substantial benefits for the commercial sector," said Mark Shavlik, president and CEO, Shavlik Technologies. "As other security vendors adopt SCAP, by mid-2009 we will see a larger number of products targeting the commercial sector which will deliver even more standards-based and interoperable, automated computer security protection to both government and commercial entities. One key driver of this is the automated remediation by our products based on the SCAP standards and template-based files from a large number of third party vendors, creating a community working together to provide solutions driven by the NIST SCAP/FDCC standards. This is a big win for all of us and a change the industry has needed for a long time. We are very excited to be an early and dedicated contributor to the process."

About Shavlik Technologies

Shavlik Technologies, LLC delivers enterprise IT organizations robust software solutions that rapidly accelerate and continuously improve security and compliance readiness by simplifying IT operations, and identifying and reliably closing system security gaps. Shavlik’s solutions provide Rapid Readiness so IT organizations realize continuous security and compliance readiness in a fraction of the time, cost and IT resources required by alternative approaches.

With more than 10,000 customers worldwide, Shavlik enables enterprises to simplify complex IT security and compliance management, providing trustworthy solutions that free up critical IT resources to focus on innovations that drive business growth while lowering costs. For more information, visit Shavlik Technologies at www.shavlik.com.

Shavlik Technologies is a registered trademark in the United States and certain other countries, of Shavlik Technologies. Additional Shavlik product names are either registered trademarks or trademarks of Shavlik Technologies. All other trademarks mentioned in this document are the property of their respective owners.

More Stories By Business Wire

Copyright © 2009 Business Wire. All rights reserved. Republication or redistribution of Business Wire content is expressly prohibited without the prior written consent of Business Wire. Business Wire shall not be liable for any errors or delays in the content, or for any actions taken in reliance thereon.

IoT & Smart Cities Stories
A valuable conference experience generates new contacts, sales leads, potential strategic partners and potential investors; helps gather competitive intelligence and even provides inspiration for new products and services. Conference Guru works with conference organizers to pass great deals to great conferences, helping you discover new conferences and increase your return on investment.
DXWorldEXPO LLC announced today that ICOHOLDER named "Media Sponsor" of Miami Blockchain Event by FinTechEXPO. ICOHOLDER gives detailed information and help the community to invest in the trusty projects. Miami Blockchain Event by FinTechEXPO has opened its Call for Papers. The two-day event will present 20 top Blockchain experts. All speaking inquiries which covers the following information can be submitted by email to [email protected] Miami Blockchain Event by FinTechEXPOalso offers sp...
Headquartered in Plainsboro, NJ, Synametrics Technologies has provided IT professionals and computer systems developers since 1997. Based on the success of their initial product offerings (WinSQL and DeltaCopy), the company continues to create and hone innovative products that help its customers get more from their computer applications, databases and infrastructure. To date, over one million users around the world have chosen Synametrics solutions to help power their accelerated business or per...
Poor data quality and analytics drive down business value. In fact, Gartner estimated that the average financial impact of poor data quality on organizations is $9.7 million per year. But bad data is much more than a cost center. By eroding trust in information, analytics and the business decisions based on these, it is a serious impediment to digital transformation.
@DevOpsSummit at Cloud Expo, taking place November 12-13 in New York City, NY, is co-located with 22nd international CloudEXPO | first international DXWorldEXPO and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. The widespread success of cloud computing is driving the DevOps revolution in enterprise IT. Now as never before, development teams must communicate and collaborate in a dynamic, 24/7/365 environment. There is no time t...
When talking IoT we often focus on the devices, the sensors, the hardware itself. The new smart appliances, the new smart or self-driving cars (which are amalgamations of many ‘things'). When we are looking at the world of IoT, we should take a step back, look at the big picture. What value are these devices providing. IoT is not about the devices, its about the data consumed and generated. The devices are tools, mechanisms, conduits. This paper discusses the considerations when dealing with the...
SYS-CON Events announced today that IoT Global Network has been named “Media Sponsor” of SYS-CON's @ThingsExpo, which will take place on June 6–8, 2017, at the Javits Center in New York City, NY. The IoT Global Network is a platform where you can connect with industry experts and network across the IoT community to build the successful IoT business of the future.
IoT is rapidly becoming mainstream as more and more investments are made into the platforms and technology. As this movement continues to expand and gain momentum it creates a massive wall of noise that can be difficult to sift through. Unfortunately, this inevitably makes IoT less approachable for people to get started with and can hamper efforts to integrate this key technology into your own portfolio. There are so many connected products already in place today with many hundreds more on the h...
The best way to leverage your Cloud Expo presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering Cloud Expo and @ThingsExpo will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at Cloud Expo. Product announcements during our show provide your company with the most reach through our targeted audiences.
CloudEXPO New York 2018, colocated with DXWorldEXPO New York 2018 will be held November 11-13, 2018, in New York City and will bring together Cloud Computing, FinTech and Blockchain, Digital Transformation, Big Data, Internet of Things, DevOps, AI, Machine Learning and WebRTC to one location.