Skybox Security Partner Participates in SANS-Sponsored National Summit

President of Iron Vine speaks at National Summit on Planning and Implementing the 20 Critical Security Controls.

San Jose, CA (Vocus) November 18, 2009

Skybox Security, the leader in automated security risk and compliance management, is pleased to announce that a key Skybox partner was a featured participant in the National Summit on Planning and Implementing the 20 Critical Security Controls. The Summit, held on Nov 12-13 in partnership with the SANS Institute, was a significant event aimed at ensuring that the government IT security community gains an in-depth understanding of how to implement, automate and measure the 20 Critical Controls for effective cyber defense. This group of controls, identified by a consensus of agency CIOs and Chief Information Security Officers across government sectors, is viewed as being effective in blocking currently known high-priority attacks, as well as those attack types expected in the near future.

Bill Geimer, president of Iron Vine Security, addressed attendees on Friday, November 13, 2009 on the topic of how automated tools can be used to implement two extremely important security controls:

•     Critical Control 4: Secure Configurations for Network Devices such as Firewalls, Routers and Switches
•     Critical Control 10: Continuous Vulnerability Assessment and Remediation

"Skybox tools can fully automate network device configuration checks and identify potential avenues of attack, in response to Critical Control 4," explained Jason Figley, partner in charge of the Security Network Engineering team at Iron Vine.Security. . "In addition, Skybox tools can automate the process of correlating vulnerabilities with threat information, network configuration, access control and the relative criticality of information assets, in response to Critical Control 10. This enables the organization to focus on the issues that are most critical, closing the serious security gaps quickly and reducing the time window of exposure. "

Skybox Security has a number of government customers utilizing solutions to support risk and vulnerability management, and firewall and network security. Through the use of Skybox solutions, they are adhering to industry best practices that are perfectly in tune with two of the most important Critical Controls under discussion. Skybox solutions have now been recognized by SANS as a user-vetted tool (http://www.sans.org/critical-security-controls/critical-security-controls), having undergone customer reference checks.

"Skybox is proud to support this important government effort, through the company's alignment with key players who are developing this important standard," stated Gidi Cohen, CEO of Skybox Security. "We are optimistic regarding the strong consensus being built in the government arena, and are confident that Skybox solutions can be effectively used in implementing Critical Controls 4 and 10."

The Skybox Security portfolio includes:

•     Skybox Firewall Compliance Auditor     (PCI Compliance, Change Assurance, Configuration Optimization)
•     Skybox Network Compliance Auditor (Network Modeling, Connectivity Troubleshooting)
•     Skybox Risk Exposure Analyzer (Attack Modeling, Risk Assessment, Vulnerability Prioritization, Patch Optimization)

About Skybox Security, Inc.
Skybox Security, Inc. is the leader in automated security risk and compliance management solutions, helping IT organizations pinpoint and prioritize security risks, compliance, and availability exposures within minutes. Our solutions automatically collect and analyze comprehensive data about network topology and systems, configuration settings, threats and vulnerabilities - anticipating the most urgent IT concerns before harm has been done. Medium to large organizations in Financial Services, Telecommunications, Retail, Government, Utilities, and Defense rely on Skybox Security solutions to reduce risk exposure and achieve compliance. For more information visit http://www.skyboxsecurity.com.

NOTE: Skybox® Security is a registered trademark of Skybox Security Inc. All other registered and unregistered trademarks herein are the sole property of their respective owners. Product specifications subject to change at any time without prior notice. © 2009 Skybox Security, Inc. All rights reserved.

PR Contacts:
Skybox Security, Inc.
Michelle Johnson Cobb, (408) 441-8060 x2019
michelle.cobb(at)skyboxsecurity.com
Or
Candia Communications
Tanya Candia, (650) 619-2874
tcandia(at)candiacomm.com

###