nCircle Surpasses 36,000 Covered Conditions, Expands Configuration Policy Library

Printer-friendly versionPDF version

nCircle, the leader in security and compliance auditing solutions, today announced the ability to audit for over 36,000 conditions, including operating systems, applications, vulnerabilities and configurations. nCircle also announced the expansion of its configuration policy library with new Center for Internet Security (CIS) certified policies.

SAN FRANCISCO—October 26, 2010—nCircle, the leader in security and compliance auditing solutions, today announced the ability to audit for over 36,000 conditions, including operating systems, applications, vulnerabilities and configurations. nCircle also announced the expansion of its configuration policy library with new Center for Internet Security (CIS) certified policies.

The new policies join a library of over one hundred industry best practice configuration policies already available, making it possible for nCircle customers to benchmark their networks against a wide range of industry best practices. The foundation of every security and compliance program is the ability to accurately and non-intrusively identify the characteristics of all assets on the network. nCircle’s agentless solutions make it possible to automatically gather thousands of  detailed configuration and security intelligence characteristics for network assets in order to deliver a continuous, comprehensive view of the network.

nCircle’s solutions compare asset characteristics and configurations from a library of built-in policies, identifying non-compliant configurations and alerting on high-risk changes and misconfigurations.

The new CIS-certified policies include:

• CIS Benchmark for SUSE Enterprise Linux Benchmark v2.0.0
• CIS Benchmark for VMWare ESX 3.5, v1.2.0
• CIS Benchmark for Debian Linux, v1.0.0, Level 1 Profile
• CIS Level 1 Benchmark for Microsoft Office 2007, v1.0.0
• CIS Level 2 Benchmark for Microsoft Office 2007, v1.0.0

CIS benchmarks are consensus reviewed technical controls and are designed to improve the security configuration of enterprise systems and devices. CIS benchmarks are widely accepted by U.S. government agencies for FISMA compliance and by auditors for compliance with PCI, Sarbanes-Oxley, HIPAA, as well as many other information security-centric regulations. CIS benchmarks provide detailed configurations of systems that dramatically improve the security posture of networked assets.

"You have to know what is on your network to improve security and achieve compliance. If you don’t know what you have, you can’t understand or reduce risk," said Tim Keanini, Chief Technology Officer at nCircle. "nCircle not only provides the most complete coverage in the industry, but also continues to deliver the most comprehensive library of configuration and compliance policies to help automate the compliance process."

About nCircle Suite360
nCircle’s solutions combine the broadest discovery of networked systems and their operating systems, applications, vulnerabilities and configurations with advanced analytics to help enterprises reduce security risk and achieve compliance. nCircle's solutions includes IP360™ for vulnerability management and risk management, WebApp360™ for web application vulnerability auditing, Configuration Compliance Manager™ (CCM) for configuration auditing of servers, desktops and network devices and file integrity monitoring, Certified PCI Scan Service™ for on-demand self-service PCI scanning, and Suite360 Intelligence Hub™ for IT governance, risk and compliance (ITGRC) reporting and analytics. nCircle Suite360 includes policies for NIST, CIS benchmarks, Microsoft, Oracle, VMware, HIPAA, Sarbanes-Oxley, FDCC, DISA STIG, ISO 27001 and more, enabling organizations to efficiently determine the security and compliance of their networks.

About nCircle
nCircle is the leading provider of automated security and compliance auditing solutions. More than 4,500 enterprises, government agencies and service providers around the world rely on nCircle's proactive solutions to manage and reduce security risk and achieve compliance on their networks. nCircle has won numerous awards for growth, innovation, customer satisfaction and technology leadership.  nCircle is headquartered in San Francisco, CA, with regional offices throughout the United States and in London and Toronto. Additional information about nCircle is available at www.ncircle.com.

nCircle is a registered trademark of nCircle Network Security, Inc. All other registered or unregistered trademarks are the sole property of their respective owners.