netForensics Delivers Comprehensive FISMA Reporting Framework

EDISON, N.J., Feb. 1 /PRNewswire/ -- netForensics, Inc., a leader in the Information Security Management market, today announced the delivery of a new FISMA reporting framework that enables Federal Government agencies to simplify and optimize FISMA compliance and reporting processes.  Available with the latest release of nFX SIM One, the new reporting framework is the industry's first solution that connects the Federal Enterprise Architecture with the Information Security Management via seamless integration between the uCMDB and the nFX SIM One Management Platform.  This integration makes it easier for agencies to adopt the new 6 step Risk Management-based framework process outlined in Special Publication 800-37 that is required for certification and accreditation.  

By creating a common, dynamic view of the enterprise business environment and underlying information security environment, nFX SIM One allows Federal Agencies to prioritize threats in real time by correlating the potential business impact to key business services with the relative vulnerability of the systems and assets that comprise the business services.  

The nFX SIM One FISMA compliance framework provides a multitude of views and reports that support the SP 800-60 guidelines from the FISMA Federal Enterprise Architecture Business Reference Model and SP 800-53A controls. This FISMA-related information is easy to find, launch, and use, and includes reports to address each of the eleven different controls in the Business Reference Model.

The nFX SIM One FISMA framework provides new capabilities to simplify and automate the FISMA compliance process including:

• nFX SIM One's bi-directional operations notification management and incident response supports "the concept of near real-time risk management and ongoing information system authorization through the implementation of robust continuous monitoring processes," espoused in publication 800-37.

• Real-time risk assessments based on a multi-dimensional view of asset risk; this picture is dynamically generated by correlating real-time event monitoring threats to an asset with the asset's known vulnerabilities and business value as defined in the uCMDB.

• Mission Assurance Category (MAC) device mappings, which allow users to group, view and report on assets by their confidentiality and/or severity level to achieve more complete visibility into the events that impact or affect the assets deemed mission critical.

"Once again, the government has raised the bar for securing critical systems and infrastructure from cyber threats," said Tracy Hulver, Vice President of Products and Marketing, netForensics.  "netForensics is pleased to build on our proven track record in helping federal agencies overcome FISMA compliance hurdles with the new reporting framework which gives agencies the agility they need to adapt to these new requirements."  

To learn more about nFX SIM One contact netForensics at 1-866-525-5666 or visit http://www.netforensics.com.

About netForensics

netForensics security information and event management solutions enable organizations of all sizes to rapidly identify and respond to threats and demonstrate ongoing compliance. Our software and appliance products collect and centralize volumes of event log data and deliver accurate, actionable, real-time security intelligence. netForensics offers the award-winning nFX Cinxi One, recognized for its ease of deployment and management, and the industry's only solution that combines security information management (SIM) and log management on one appliance. For over a decade, our nFX SIM One software solution has helped enterprises, managed service providers, and government agencies around the world to manage risk, protect their assets, and maintain compliant operations.

SOURCE netForensics, Inc.