nCircle And Core Security Announce Support For CAG

PRESS RELEASE

SAN FRANCISCO—November 30, 2010—nCircle, the leader in security and compliance auditing solutions, and Core Security Technologies, the leading provider of IT security testing solutions, today announced a jointly-developed coverage map of the SANS Consensus Audit Guidelines (CAG). Developed by a consortium of public and private security leaders, CAG requirements specifically cite the need for cyber-security controls that are tacitly proactive and can "inform defense" of actual attacks that have compromised systems, or those that could aspire to do so.

For government agencies and commercial businesses, use of nCircle and Core Solutions in concert allows for compliance with specific controls within eighteen of the twenty CAG requirements, including the ability to fully meet many of the security mandates.

“The twenty critical controls usher in a paradigm shift in cyber situational awareness. Offense must inform defense, and the CAG serves as an enlightened foundation upon which organizations should build their castles in cyberspace,” said Tom Kellermann, Vice President of Security Awareness, Core Security. “The partnership between nCircle and Core Security endows users with real-time, threat based risk metrics on the effectiveness of your twenty critical controls. The advanced blended attacks of 2010 demand it.”

“Many agencies and organizations have found the twenty critical controls to be a powerful way of prioritizing security requirements because they are meaningful to technical and business people alike – but organizations need an integrated approach to getting their hands around all of those moving parts,” noted Keren Cummins, nCircle's Director, Federal Market. “nCircle and Core Security have come together to show that you don’t need twenty vendors to provide best of breed coverage for the majority of the CAG controls.”

Click here to access the nCircle/Core Security Coverage Map of the Consensus Audit Guideline Critical Security Controls.

nCircle's solutions includes IP360™ for vulnerability management and risk management, WebApp360™ for web application vulnerability auditing, Configuration Compliance Manager™ (CCM) for configuration auditing of servers, desktops and network devices and file integrity monitoring, and Suite360 Intelligence Hub™ for IT governance, risk and compliance (ITGRC) reporting and analytics. nCircle Suite360 includes policies for NIST, CIS benchmarks, Microsoft, Oracle, VMware, HIPAA, Sarbanes-Oxley, FDCC, DISA STIG, ISO 27001 and more, enabling organizations to efficiently determine the security and compliance of their networks.

About nCircle

nCircle is the leading provider of automated security and compliance auditing solutions. More than 4,500 enterprises, government agencies and service providers around the world rely on nCircle's proactive solutions to manage and reduce security risk and achieve compliance on their networks. nCircle has won numerous awards for growth, innovation, customer satisfaction and technology leadership. nCircle is headquartered in San Francisco, CA, with regional offices throughout the United States and in London and Toronto. Additional information about nCircle is available at www.ncircle.com.

About Core Security Technologies Core Security Technologies enables organizations to get ahead of threats with security test and measurement solutions that continuously identify and prove real-world exposures to their most critical assets. Our customers can gain real visibility into their security standing, real validation of their security controls, and real metrics to more effectively secure their organizations.

Core Security’s software solutions build on over a decade of trusted research and leading-edge threat expertise from the company’s Security Consulting Services, CoreLabs and Engineering groups. Core Security Technologies can be reached at on the Web at: http://www.coresecurity.com.