NIST 800-53 Compliance for FISMA

NIST 800-53 Compliance: Tripwire’s Solution for Continuous Monitoring and Risk Management of Federal Information Systems

Special publications from NIST provide guidance to federal agencies around FISMA compliance. NIST SP 800-53 provides guidelines on security controls required for federal information systems. NIST SP 800-37 was recently released to help achieve near real-time risk management through continuous monitoring of the controls defined in NIST 800-53. NIST 800-137 was also released to provide additional guidance that will require automation to extend reporting and monitoring enterprise-wide.


Tripwire delivers continuous and automated monitoring of NIST 800-53 security controls to help government agencies identify and prioritize assets, identify risk threshold, determine monitoring frequency and report to authorizing officials.

Tripwire’s solution for NIST 800-53/FISMA compliance:

  • Implements security controls and assesses configurations against NIST 800-53 policy requirements
  • Provides automated remediation or remediation guidance of misconfigurations across heterogeneous IT infrastructure
  • Continuously monitors IT configurations and detects high-risk changes with prioritized, actionable real-time alerts
  • Demonstrates, through real-time dashboards and automated reports, current, historical and trending compliance
  • Extracts actionable information from servers, networks and systems to provide forensic analysis and on-demand, auditable proof
Practical Guide to Continuous Monitoring

Watch the Practical Guide to Continuous Monitoring, Video Series

Watch the 4 part Video Series with Tripwire Lead Systems Engineer, Steve Johnston, CISSP

Watch Now


FISMA Resources

    • Happy New Year! Data Breach Roundup – January 2012
      It’s time for the January 2012 edition of the Data Breach Roundup! I’m trying out a cool new curation tool called Storify. Please let me know what you think of this format. Thanks! [View the story...
    • Infosec and too much to do
      One of the most common concerns I hear about from the enterprises I speak with all the time is that of having too much to do.  There’s never enough [time, money, people] to go around. So, what are they...
    • Safe, Dead or Lucky? (Knowing Good From Bad)
        There’s a saying among North American wildlife enthusiasts that goes something like, “Red touches yellow kills a fellow. Red touches black, friend of Jack.” It’s a pleasantly singsongy warning...

To read more blog posts, visit the State of Security Blog.

To browse more, visit the company news section.

Resource Library

Resource Library

Read, watch or listen to valuable information about Tripwire solutions, customer success stories, IT security and compliance best practices, and more.

Resource Library