SecureFusion from Gideon Technologies Named by NIST as One of the First Validated Solutions for FDCC Compliance

ATLANTA, Feb. 5 /PRNewswire/ -- Gideon Technologies today announced that its 100-percent agent-less SecureFusion(TM) software has been validated by the National Institute of Standards and Technology (NIST) to automate Federal Desktop Core Configuration (FDCC) compliance measurement in accordance with the Secure Content Automation Protocol (SCAP). Adopting FDCC security standards is a Feb. 1, 2008 requirement for all federal Microsoft Windows XP and Vista desktop configurations.

SecureFusion is the only agent-less tool to automate FDCC assessments through the application of SCAP. SecureFusion can be deployed rapidly and enables continuous monitoring for organizations that are required to measure and verify FDCC compliance by the Office of Management and Budget (OMB) memorandum M-07-11.

SecureFusion received NIST validation for its SCAP and FDCC configuration and policy management capabilities after rigorous laboratory testing. SecureFusion software uses SCAP content to automatically include FDCC templates for compliance measurement and to simplify compliance management. Government agencies can utilize SecureFusion's FDCC templates to rapidly discover assets, scan configurations and measure enterprise-wide compliance.

"SecureFusion can help Federal agencies of all sizes rapidly assess FDCC compliance along with many other government IT security mandates," said Ken Halley, CEO of Gideon Technologies. "The modular, agent-less SecureFusion suite continuously enumerates IT assets, vulnerabilities, configuration details and policy compliance for a comprehensive, one-stop solution to complying with information security standards."

SecureFusion's patented discovery scanning technology quickly identifies every asset that must be measured with the FDCC standard. With no agents to deploy, SecureFusion continuously collects information from desktop and server scans into the centralized SecureFusion Portal where agencies can readily assess FDCC compliance and generate reports.

As part of automating FDCC compliance activities, SecureFusion integrates four critical functions-each in accordance with SCAP-including:

    --  SecureFusion Asset Discovery - rapidly discovers and inventories all
        networks and network assets, including managed and unmanaged devices.
    --  SecureFusion Configuration Management - maintains an accurate
        inventory of system configurations, including technical controls,
        software, user accounts and system changes.
    --  SecureFusion Vulnerability Management - conducts ongoing vulnerability
        detection and reporting for operating systems, infrastructure, network
        applications and databases.
    --  SecureFusion Policy Management - continuously evaluates system
        configuration and compliance with standards and policies.

In a memorandum to Federal CIOs, the U.S. Office of Management and Budget has required that U.S. government systems must use SCAP-validated tools for FDCC software acceptance testing and continuous monitoring of systems. SCAP- validated tools have passed independent third-party testing and can be found on a new National Vulnerability Database Program Web page at http://nvd.nist.gov/tools.cfm.

About Gideon Technologies

Gideon Technologies provides the clearest view of assets and risk in the enterprise IT environment. Its SecureFusion software helps enterprises continuously visualize all IT assets, prioritize risk accordingly and measure remediation efforts for the most complete, accurate, repeatable risk assessment. For more information, contact Gideon Technologies at 770-783-5270 or visit www.gideontechnologies.com.