CMUF Monthly Update: June
The deadline is approaching for vendors that were moved to the Historical List because of their RNG use. July 1 is the last day that a lab can submit a no-cost 3Sub to move a module …
Ixia Products Reach “In Process” for FIPS 140-2
Corsec would like to congratulate our partner, Ixia, which provides testing, visibility, and security solutions to strengthen applications across physical and virtual networks; on being listed on the “In Process” list for two of their FIPS 140-2 validations. Ixia’s products, the VisionONE …
NTIS Appoints Avi Bender as New Director
The Department of Commerce’s National Technical Information Services (NTIS) has announced a few new changes that may very well shake up the way the government uses and shares information. NTIS has announced a new joint …
Cybersecurity Acquisition Vehicle Coming
The General Services Administration (GSA) has announced their intentions to add another SIN to the GSA Schedule 70 – “Highly Adaptive Cybersecurity Services (HACS)”. The new SIN will be broken down into three categories for security services — proactive, …
DHS funds Cyber Defense
The Department of Homeland Security (DHS) has approved $1.8 billion in funding to prevent cybersecurity attacks and protect critical infrastructure. The House Appropriations Subcommittee approved the bill last week in order to support the National Protection and …
Updates to Canadian Common Criteria Certifications
The Communications Security Establishment (CSE), the governing body of Common Criteria in Canada, has officially stated they will only accept Protection Profile (PP) based evaluations starting in September of 2017. Furthermore, they have stated that they …
Event Recovery and PIV Updates from NIST
NIST has released draft Special Publication (SP) 800-184, titled “Guide for Cybersecurity Event Recovery” – This draft is open to public comment until July, 11th, 2016 “The purpose of this document is to support federal agencies …
Poor Project Management Could Derail Your Certification Efforts
CMVP has new guidelines which went live last month via the release of Implementation Guidance (G.16). This update will affect product vendors that have not taken proper precautions with project management related to their FIPS 140-2 validations. During …
FIPS 140-2 Sunset Policy Update!
CMVP; the governing body that oversees U.S. FIPS 140-2 validations, has made drastic changes over the past year to policy governing product certification longevity. This week they went one step further and have now updated …
Cisco’s StealthWatch AC for Common Criteria Completed
Corsec would like to congratulate our partner Cisco Systems for achieving an Assurance Continuity (AC) on their Common Criteria listing for the StealthWatch solution. StealhWatch (originally a Lancope product) completed the Common Criteria certification process in May of …
DISA Cloud Migration
In 2013, the Defense Informations Systems Agency (DISA) developed an on-premise cloud solution for the DoD – milCloud 1.0. DISA continues to operate and manage this solution, but since its inception, cloud based services have …
Updates From Around the Globe
Over the past two months Corsec has traveled from Seoul, Korea to Ontario, Canada in order to attend security certification events such as the Common Criteria Users Forum (CCUF), and the International Cryptographic Module Conference (ICMC). The discussions …
Recent NIST Releases
NIST Releases “Best Practices Guide for Personal Identity Verification (PIV)-enabled Privileged Access” In response to the Office of Management and Budget (OMB)’s Cybersecurity Strategy and Implementation Plan, NIST has released their best practices guide for Personal Identity Verification …
Cybersecurity Innovation Forum
Corsec recently attended the Cybersecurity Innovation Summit at George Mason University in Fairfax, VA. This event created a platform for discussions on the recent advancements in cybersecurity and the evolving challenges security experts face. Among those attending, were members of …
Corsec Speakers and Attendance at ICMC
As previously posted, next week in Ottawa, Ontario, Canada, hundreds of global leaders in the commercial encryption community will gather at the fourth annual International Cryptographic Module Conference (ICMC). Corsec’s President John Morris will be joining …
CC Certification of HPE Asset Manager Finalized
Corsec would like to congratulate our partner, HP Enterprise on successfully completing the Common Criteria certification process for the HPE Asset Manager v9.50 with Connect-It v9.60 build #12154 (AM) and 010 (CIT). The certification was completed at an …
CCUF Management Board Election Results
The Common Criteria Users Forum (CCUF), which serves as a voice amongst the Common Criteria community recently held elections for its management board. Corsec’s Matt Keller, who has served as the Vice Chair for the past 4 …
Vocera Completes FIPS Validation
Corsec would like to thank and congratulate our partner Vocera Communications on completing the Federal Information Processing Standard for their Vocera Cryptographic Module v3.0 (#0894). This module has now completed and finalized all the necessary requirements for …
Corsec’s Matt Keller Attending 2016 ICMC
Next month in Ottawa, Ontario, Canada, hundreds of global leaders in the commercial encryption community will gather at the fourth annual International Cryptographic Module Conference (ICMC). Corsec’s Matt Keller, who also serves as CMUF Management …
ScienceLogic Completes Second DoDIN APL Listing Process
Corsec would like to congratulate our partner, ScienceLogic, on successfully completing all the necessary requirements to achieve listing on the DoD’s Information Network Approved Products List (DoDIN APL). ScienceLogic’s server monitoring product, the EM7 v7.8, …