Risk
9/18/2013
02:49 PM
50%
50%

HP Offers Continuous Monitoring Service For Government IT

HP Continuous Monitoring service integrates multiple software packages and risk management principles for federal agencies who must meet continuous monitoring mandates.

Iris Scans: Security Technology In Action
Iris Scans: Security Technology In Action
(click image for larger view)
HP on Tuesday introduced a new group of security products designed to help the government identify and report IT security vulnerabilities and improve situational awareness. The product line is also intended to provide enhanced protection of sensitive information.

The new offering is a set of services that integrates multiple software packages and is based on principles of security risks. Agencies can install HP Continuous Monitoring on their own, or HP can provide it as a service off-premise.

"Continuous Monitoring starts with a discussion with [an agency] on what they are willing to accept in terms of risk and how they can mitigate it. We implement the automated policies and we provide that to the IT person responsible for the network," Betsy Hight, VP of HP's cybersecurity solutions group for the U.S. public sector, said in a phone interview.

[ What can your business learn from the DOE's security goofs? Read Department Of Energy Cyberattack: 5 Takeaways. ]

Instead of simply providing a snapshot of potential threats, the software-based risk management architecture shows threats instantaneously across the agency by actively identifying and reporting potential vulnerabilities, such as new hardware or software on the network. If an employee plugs in a brand new computer, for instance, the network administrator would instantly see the unprotected device and could quarantine it. The architecture works on three levels: the IT side; middle management, addressing how risk affects processes; and the executive team, for the strategic and long-term effects of risk. "They all need to understand what's happening," said Hight.

HP Continuous Monitoring also complies with updated security mandates, including the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37 and SP 800-137.

In 2010, the Office of Management and Budget (OMB) introduced a mandate for continuous monitoring of IT assets. The changes were defined in new Federal Information Security Management Act (FISMA) regulations, requiring agencies to implement software that supports continuous monitoring, and to start using Cyberscope, an online tool that reports how agencies are meeting the FISMA requirements. OMB last year asked agencies to reauthorize the security of all their systems at least annually, instead of reviewing the systems every three years as they have done in the past.

The proposed federal IT budget for fiscal year 2014 devotes more than $13 billion to cybersecurity programs, which includes $300 million in new funding for continuous monitoring.

Understanding security threats in real time will become an even bigger priority for agencies, said Hight. "The cyber domain is the next avenue for malicious activity impacting every organization both public and private," she said. "If we don't recognize the risks, we're setting ourselves up for failure."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
WKash
50%
50%
WKash,
User Rank: Apprentice
9/23/2013 | 10:02:31 PM
re: HP Offers Continuous Monitoring Service For Government IT
No question, continuous monitoring systems/services are the way to go. But it seems that insider threat, a la Edward Snowden, where users are authorized to be on the network, will continue to elude tools that are focused on hardware and software activities and traffic patterns.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading December Tech Digest
Experts weigh in on the pros and cons of end-user security training.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5395
Published: 2014-11-21
Multiple cross-site request forgery (CSRF) vulnerabilities in Huawei HiLink E3276 and E3236 TCPU before V200R002B470D13SP00C00 and WebUI before V100R007B100D03SP01C03, E5180s-22 before 21.270.21.00.00, and E586Bs-2 before 21.322.10.00.889 allow remote attackers to hijack the authentication of users ...

CVE-2014-7137
Published: 2014-11-21
Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM before 3.6.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) contactid parameter in an addcontact action, (2) ligne parameter in a swapstatut action, or (3) project_ref parameter to projet/tasks/contact.php; (4...

CVE-2014-7871
Published: 2014-11-21
SQL injection vulnerability in Open-Xchange (OX) AppSuite before 7.4.2-rev36 and 7.6.x before 7.6.0-rev23 allows remote authenticated users to execute arbitrary SQL commands via a crafted jslob API call.

CVE-2014-8090
Published: 2014-11-21
The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nes...

CVE-2014-8469
Published: 2014-11-21
Cross-site scripting (XSS) vulnerability in Guests/Boots in AdminCP in Moxi9 PHPFox before 4 Beta allows remote attackers to inject arbitrary web script or HTML via the User-Agent header.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Now that the holiday season is about to begin both online and in stores, will this be yet another season of nonstop gifting to cybercriminals?