On the eve of the Feb 1, 2008 OMB mandate, Secure Elements C5 Platform went through a detailed technical analysis to attest to its ability to process the SCAP data streams and evaluate the Federal Desktop Core Configuration functionality and report production. The certification is timely in order to support the OMB March 31, 2008 deadline for reporting FDCC compliance. The public-private partnerships developed between government and industry, bringing the SCAP Validated Tools and the FDCC initiatives together, is evidence that progress is being made towards accountability in securing our infrastructure. Industry and government must continue forward with initiatives addressing secure baselines for server technology, network infrastructure equipment and applications. I believe that SCAP based solutions are poised to evolve beyond security configuration compliance - and will include other areas of systems and operational management – such as compliance with energy efficient settings, and other regulatory initiatives such as HIPAA, SOX, PCI, and others.
Submitted by: A Bove
Filed under: Executive Insight
