Tenable Earns NIST SCAP Tool Validation for Federal Desktop Core Configuration (FDCC) Audits

Tenable’s SecurityCenter 4 Management Suite is validated by NIST to perform SCAP FDCC audits for both Windows XP and Vista

COLUMBIA, Md.--(BUSINESS WIRE)-- Tenable Network Security, Inc., the leader in Unified Security Monitoring and creator of the popular and award-winning Nessus vulnerability scanner, announced today that Tenable’s SecurityCenter 4 has been validated by NIST to perform Security Content Automation (SCAP) FDCC Compliance Auditing for the Microsoft Windows XP and Vista platforms. Tenable’s SecurityCenter was one of the original solutions to receive FDCC certification. Certification of the latest version of Tenable’s SecurityCenter allows U.S. Government agencies to utilize Tenable’s latest innovative features to meet FDCC compliance.

In July of 2007, the U.S. Office of Management and Budget (OMB) released a memorandum to Federal CIOs, (http://www.cio.gov/documents/FDCC_Memo.pdf) mandating that all government agencies implement FDCC for all Windows XP and Vista desktops. In addition, all government agencies must use, when available, a NIST SCAP validated tool to audit and monitor compliance with the FDCC mandate.

SCAP is a suite of open standards that enumerates software flaws, security related configuration issues, and product names, measures systems to determine the presence of vulnerabilities, and provides mechanisms to rank (score) the results of these measurements in order to evaluate the impact of the discovered security issues. SCAP defines how these standards are used in unison to accomplish these capabilities.

“NIST’s SCAP tool validation is important because it provides independent, standards-based verification of the security functions delivered by Tenable’s SecurityCenter suite,” said Ron Gula, CEO of Tenable. “Tenable is pleased to announce this validation for SecurityCenter 4 and we are committed to supporting NIST's Federal Desktop Core Configuration standards and delivering solutions that help make government agencies both secure and compliant.”

For more information on Tenable’s validation status with NIST, please visit: http://nvd.nist.gov/validation_tenable.cfm

For more information on how Tenable’s SecurityCenter 4 performs FDCC audits, please visit: http://www.tenable.com/demos/

About Tenable Network Security

Tenable Network Security provides enterprise-class software solutions for continuous monitoring and visibility of vulnerabilities, configurations, user activity and system events which impact security and compliance. Tenable’s award-winning products are used by many Global 2000 organizations for PCI auditing, Federally-mandated compliance testing, log collection and risk management. Tenable is the creator and manufacturer of the Nessus vulnerability scanner. For more information, please visit http://www.tenable.com.

Tenable Network SecurityJack Huffard, 410-872-0555
[email protected]

Source: Tenable Network Security