The standard installation, operation, maintenance, and patching of an ISV’s software must not alter the configuration settings from the approved FDCC configuration.
Herndon, VA (PRWEB) October 31, 2007 -–
Secure Elements, the industry leader in standards-based IT audit and compliance management, today announced their offering of the “FDCC Ready” NIST SCAP Certification and Services for Independent Software Vendors (ISVs).
Secure Elements’ ISV assessment and certification services enable ISVs to attest that their applications are FDCC compliant – backed by the leading SCAP vendor and trusted partner to the Federal Government. Secure Elements will leverage the C5 Compliance Platform to assess ISV applications against baseline configurations for compliance with the FDCC profile from the NIST SCAP data stream for the targeted operating systems – Microsoft XP and Vista.
The Office of Management and Budget has issued memorandums to government CIO’s requiring the adoption and implementation of the secure Federal Desktop Core Configuration (FDCC) baseline for Microsoft Windows XP and Vista by February 1, 2008. These memorandums also provide language for agencies to use in solicitations to ensure new acquisitions include these common security configurations and information technology providers certify their products operate effectively using these configurations.
“OMB is requiring ISVs to certify their applications running on these platforms do not alter the operating system’s security settings and operate as intended on the FDCC” said Andrew Bove, Chief Technology Officer at Secure Elements. “The standard installation, operation, maintenance, and patching of an ISV’s software must not alter the configuration settings from the approved FDCC configuration.”
“As key contributors to the NIST SCAP data streams for Microsoft XP, Vista, and related applications, and as the leading solution provider for auditing these configurations, we have credentials that are unique to the industry.” said Scott Armstrong Vice President of Marketing and Alliances at Secure Elements. “We look forward to providing ISVs with FDCC SCAP assessment and certification services for their applications via our C5 FDCC SCAP Certified Application initiative. As the ISVs go to partner for FDCC SCAP Certification, we will ensure ISVs are compliant, and that they can attest – with certainty – that their applications are FDCC Ready.”
About Secure Elements
Secure Elements develops innovative products that help organizations achieve IT security compliance. We enable organizations to audit, evaluate, and comply with internal, industry, and regulatory policies. Our solutions reduce business risk and IT management costs while improving systems performance and maintaining business continuity. Based in Northern Virginia, Secure Elements serves organizations in the federal government and critical infrastructure markets, as well as the Global 1000. http://www.secure-elements.com.