April 11, 2008
Tenable Network Security, Inc., the leader in unified security monitoring and creator of the popular and award-winning Nessus vulnerability scanner, announced today that Tenable’s Security Center has been validated by NIST to perform Security Content Automation (SCAP) FDCC Compliance Auditing for the Microsoft XP and Vista platforms.
In July of 2007, the U.S. Office of Management and Budget (OMB) released a memorandum to Federal CIOs, (http://www.cio.gov/documents/FDCC_Memo.pdf) mandating that all government agencies implement the FDCC for all Windows XP and Vista desktops. In addition, all government agencies must use, when available, a NIST SCAP validated tool to audit and monitor compliance with the FDCC mandate.
The Security Content Automation Protocol (SCAP), pronounced “Ess-Cap”, is a method for using specific standards to enable automated vulnerability management, measurement, and policy compliance evaluation (e.g., FISMA compliance). More specifically, SCAP is a suite of open standards that enumerates software flaws, security related configuration issues, and product names, measures systems to determine the presence of vulnerabilities, and provides mechanisms to rank (score) the results of these measurements in order to evaluate the impact of the discovered security issues. SCAP defines how these standards are used in unison to accomplish these capabilities.
“NIST’s SCAP tool validation is important because it provides independent, standards-based verification of the security functions delivered by the Tenable Security Center and related components,” said Ron Gula, CEO of Tenable. “Tenable is pleased to announce this validation for Security Center and to provide our current and future customers the highest level of confidence that our solutions deliver on their security promises.”
For more information on Tenable’s validation status with NIST, please visit: http://nvd.nist.gov/validation_tenable.cfm
For more information on how Tenable’s Security Center performs FDCC audits, please visit: http://www.tenablesecurity.com/demos/
About Tenable Network Security
Tenable Network Security transforms security technology for the business needs of tomorrow through comprehensive solutions that provide continuous visibility and critical context, enabling decisive actions to protect your organization. Tenable eliminates blind spots, prioritizes threats, and reduces exposure and loss. With more than one million users and more than 20,000 enterprise customers worldwide, organizations trust Tenable for proven security innovation. Tenable's customers range from Fortune Global 500 companies, to the U.S. Department of Defense, to mid-sized and small businesses in all sectors, including finance, government, healthcare, higher education, retail and energy. Transform security with Tenable, the creators of Nessus and leaders in continuous monitoring, by visiting tenable.com.
(410) 872-0555 x1559