FISMA Compliance Suite

Prove data confidentiality. Immutable Logs.

Government agencies recognize the critical role protecting information assets has on the protection of our national infrastructure and the importance of best-in-class IT governance. A number of laws and regulations substantiate the mandate for log management and analysis in the government. The most pertinent of these is probably the Federal Information Security Management Act of 2002 (FISMA) and specifically Title III, Subchapter III, which deals with “Information Security.” Most agencies recognize that there is a broader mandate to audit, monitor, and alert appropriate personnel to address and reduce the fundamental security and operational risks and to ensure compliance with service level targets. LogLogic can help.

Overview

"I would absolutely recommend [LogLogic] when it comes to a logging solution… I’m 99.9% sure that whatever requirements you come up with LogLogic meet those and then come to the table with others that you didn’t even think about.”

— Richard Fouke, US Government Agency

LogLogic Compliance Suite enables best practices and processes to be easily implemented and enforced to support the IT governance requirements of government agencies, while also addressing the more detailed requirements of those responsible for solution and service delivery. As a result, CIOs can optimize IT investments, ensure value delivery and mitigate IT risk in a transparent manner.

The LogLogic Compliance Suite automates the process of using log data to evidence and enforce policies outlined in FISMA through out-of-the-box reports and alerts – both easily customizable – that directly map to the FISMA standards developed by the National Institute for Standards and Technology (NIST). FIPS 200, finalized in March 2006, outlines the “Minimum Security Requirements for Federal Information and Information Systems” and NIST 800-53, updated in December 2006, addresses “Recommended Security Controls for Federal Information Systems”. The first solution of its kind, LogLogic’s Compliance Suite reports and alerts run on LogLogic’s award winning LogLogic appliances.

LogLogic value-added partners can also provide consulting services around the other FISMA required standards developed by NIST including: FIPS 199 (Standards for Security Categorization of Federal Information and Information Systems), NIST 800-59 (Guideline for Identifying an Information System as a National Security System) and NIST 800-60 (Guide for Mapping Types of Information and Information Systems to Security Categories).