GOVERNMENT Certifications

The National Institute of Standards and Technologies (NIST) helps the U.S. government define information security standards for solutions that are used by U.S. government agencies.

SCAP

Nist image description

Security Content Automation Protocol (SCAP) Validated Products List

As of June 20, 2012, SecureVue® has completed NIST SCAP certification (Validation Number 123) and has been added to the SCAP Validated Products List. SCAP is a suite of vulnerability management standards that enable standardization and automation of vulnerability management, measurement and technical policy compliance. SCAP enables federal government agencies to implement security products that are compliant with current SCAP guidelines.

UC APL

ico-24

Unified Capabilities Approved Products List (UC APL)

SecureVue® from eIQnetworks, the industry’s first unified situational awareness® platform, has been approved for inclusion on the Department of Defense (DoD) Unified Capabilities Approved Product List (UC APL) by the Defense Information Systems Agency (DISA). The purpose of UC APL is to maintain a single consolidated list of products that have completed Interoperability (IO) and Information Assurance (IA) certification by DISA for all DoD network infrastructures.

US ARMY CON

US_Army_logo

Certificate of Networthiness (CoN)

SecureVue® from eIQnetworks has received a Certificate of Networthiness (CoN) from the U.S. Army. The CoN ensures SecureVue meets strict United States Army and Department of Defense (DoD) standards for security – including confidentiality, integrity and availability – as well as stringent requirements for compatibility and sustainability within DoD environments. A CoN is required for all enterprise software products in the Army Enterprise Infrastructure Network. This certification also applies to all National Guard, Army Reserve, and DoD organizations that use the Army Enterprise Infrastructure Network.

FIPS 140-2

ico-25

FIPS 140-2 Level 2, Design Assurance 3

Federal Information Processing Standard (FIPS) Publication 140-2 is a U.S. government computer security standard used to accredit cryptographic modules. The Cryptographic Module Validation Program (CMVP) validates cryptographic modules to FIPS 140-2 and other cryptography based standards. The CMVP is a joint effort between NIST and the Communications Security Establishment (CSE) of the government of Canada. eIQ’s SecureVue unified situational awareness® platform is certified under FIPS 140-2, Level 2, Design Assurance 3

COMMON CRITERIA

ico-26

Common Criteria – NIAP EAL 2+ (currently in evaluation)

SecureVue is currently in evaluation at EAL 2+. The Common Criteria is a framework for software and hardware vendors to implement and certify defined levels of security within their products. Common Criteria is accepted by a number of organizations internationally as a definitive standard for proving that the integrity and security architecture of a technology has been tested and validated against known criteria and performed by an accredited third-party source.