This is a major development for us, as the certification re-enforces our commitment to providing the most effective and secure solutions for our customers to help safeguard IT systems and protect sensitive data
Scottsdale, Ariz. (PRWEB) January 13, 2009
Lumension Security™, Inc., the global leader in security management, today announced its Data Protection Technology has been placed on the In-Process List for the FIPS 140-2 (Federal Processing Standards Publication) Validation by the National Institute of Standards and Technology in the U.S. and by the Communications Security Establishment in Canada.
"This is a major development for us, as the certification re-enforces our commitment to providing the most effective and secure solutions for our customers to help safeguard IT systems and protect sensitive data," said Mike Wittig, president and CTO of Lumension. "Achieving NIST's In Process Listing for FIPS 140-2 Validation for our device encryption technology is a testament to our ongoing strategy of providing reliable, safe and the most secure data protection solutions for both private and public sectors. To that end, we remain focused on working with third party organizations such as NIST to ensure that our solutions meet the highest criteria levels set by these entities and exceed industry and regulatory standards."
FIPS 140-2 is a U.S. government computer security standard used to accredit cryptographic modules and to certify private sector vendor products for use in government departments and regulated industries that collect, store, transfer, share and disseminate sensitive information. FIPS 140-2 validation is a requirement for any cryptographic product which will be used in a US government agency network. The United States Federal Government is required to purchase cryptographic products validated to the FIPS 140-2 standard. In the international marketplace, ISO19790 is being adopted as a worldwide standard and is a direct adaptation of FIPS 140-2.
The testing process involves both an Algorithm validation (to test each algorithm implementation individually) and then a Module validation to test the operation of the module as a whole. The Federal Information Processing Standards (FIPS) 140-2 validation specifies security requirements necessary for a cryptographic module to be utilized within government security systems protecting sensitive, but unclassified, information. Security level 2 certified cryptographic modules meet all the basic level 1 requirements plus some additional requirements such as tamper evidence, role- or identity-based operator authentication and more.
Lumension is currently in the process of receiving Security Level 2 certification and is listed on the NIST website. Final validation is expected to be completed midyear.
Receive a free 30 day evaluation of Lumension Data Protection Solution.
Download a free whitepaper on ways to protect business data from loss and theft, Taking Control of Your Data.
About Lumension Security™, Inc.:
Lumension Security™, formed by the combination of PatchLink® Corporation and SecureWave® S.A., is a recognized, global security management company, providing unified protection and control of enterprise endpoints for more than 5,100 customers and 14 million nodes worldwide. Leveraging its proven Positive Security Model, Lumension Security enables organizations to effectively manage risk at the endpoint by delivering best-of-breed, policy-based solutions that simplify the entire security management lifecycle. This includes automated asset discovery, vulnerability assessment, remediation and validation; security configuration management; application control and device control; extensive policy compliance reporting; and integration with leading network access control solutions. Headquartered in Scottsdale, Arizona, Lumension has offices worldwide, including Virginia, Florida, Luxembourg, the United Kingdom, Spain, Australia, Hong Kong and Singapore. More information can be found at lumension.com.
Lumension Security, the Lumension logo, PatchLink® and Sanctuary® are trademarks or registered trademarks of Lumension Security. All other trademarks are the property of their respective owners.