|
FISMA Solutions
The Standard
The Federal Information Security Management Act (FISMA) was signed into law in 2002 as part of the Electronic Government Act. It mandates an agency-wide approach to IT security in an effort to secure federal information and assets. The act holds senior management accountable for ensuring the timely implementation of security measures. By viewing IT security as a life cycle process, FISMA integrates security with overall IT management and maintenance processes.
Government agencies will soon be required to meet the standards published in the Minimum Security Requirements for Federal Information and Information Systems document, also referred to as FIPS 200. These standards, currently published by the National Institute of Standards and Technology as special publication 800-53, further detail the specific implementation requirements to heighten security within government information systems.
The Challenge
FISMA compliance requires detailed reporting and measurements on security for the agency, both on the existing risks as well as the remediation plans. Verifying compliance for every Windows-based systems within the organization requires comprehensive validation testing and remediation planning with coordinated reporting and information flow to allow the head of an agency’s IT department to accurately report on their current FISMA compliance status.
The Solution
ScriptLogic solutions can assist in brining every aspect of the Windows network within a government agency into compliance in the areas of Active Directory, server and desktop security. The following actions can be performed with ScriptLogic solutions to meet FISMA control requirements:
Assess security to identify risks and to evaluate existing controls – Report on the current security settings in AD and on Windows servers with Active Administrator and Enterprise Security Reporter.
Reduce security risks with proper assignments – Lock down permissions in AD using Active Templates with Active Administrator and NTFS permissions on Windows servers with Security Explorer.
Recover security settings to ensure continuity of operations – Active Administrator can backup and restore AD, AD security and GPOs, making Active Directory more highly available. Security Explorer can backup and restore NTFS permissions on Windows servers, quickly restoring server to an operational state.
|
Compliance Center
