National Cybersecurity Authority Essential Cybersecurity ControlsThe NCA works closely with public and private entities to improve the cybersecurity posture of the country in order to safeguard its vital interests, national security, critical infrastructures, high priority sectors, and government services and activities. The NCA’s Essential Cybersecurity Controls (ECC) take the cybersecurity needs...

Tripwire IP360™, the leading vulnerability and security risk management systemVulnerability management solutions are only valuable when they help you prioritize your efforts effectively. Fortra’s Tripwire® IP360™ is an enterprise-class vulnerability management solution that enables cost-effective reduction of cyberthreat risk by focusing your remediation efforts on the highest risks and most...

Tripwire’s File Integrity Monitoring (FIM) SolutionTo enhance your Federal Information Security Management Act (FISMA) compliance grade, you must implement one of the most challenging controls in NIST SP 800-53: the Controls, Family: System Information & Integrity (SI) 7 requirement. SI-7 states that organizations must employ automated and centrally managed integrity verification tools to detect...

Cybersecurity for IT TeamsMany IT teams are facing challenging skills gaps or struggling with optimizing their cybersecurity software. It might be that your team is too small for their responsibilities, or that you’re finding it difficult to attract, train, and retain talent. Turnover is a common problem, with organizations and agencies often losing skilled individuals to new opportunities....

When Should Your Security Strategy Include Agent-Based Monitoring?It can be difficult to discern when and how to incorporate agents into your vulnerability management processes. There are several instances in which agent-based monitoring offers superior support and protection across your networks. But that doesn’t mean you need to opt for a 100 percent agent-based approach, either. There are...

Given today’s environment of sophisticated security threats, security analytics solutions and regulatory compliance demands, the need for a more intelligent log solution has become clear.

Tripwire AxonMany organizations have misdiagnosed a critical endpoint security and IT problem, the collection of endpoint data. The mistake is thinking, “We have too much data!” While organizations may have a large volume of data, they are still not collecting complete data, or in some cases not collecting data at all, from the many endpoints in their environment.Many organizations have: Silos of...

Enrich your SIEM with Compliance and Change IntelligenceStay ahead of emerging threats with IBM Security and TripwireCybercriminals are more sophisticated than ever, and the attacks on all types of organizations show no signs of slowing down. That’s why IBM Security, Tripwire and a wide range of security industry leaders have joined forces on the IBM Security App Exchange—so security teams from...

Why is Microsoft Active Directory Important?Microsoft Active Directory (AD) gives organizations a major advantage in terms of orderly, on demand user credential management. The Tripwire® Enterprise integration with AD allows Tripwire Enterprise to gather group and member information based on existing roles within AD.Without this integration, organizations using security products in tandem with AD...

North American electric utility companies constantly balance the need to be audit-ready for NERC CIP compliance against their top priority: ensuring the reliability of the bulk electric system.NERC CIP compliance, especially when approached using manual methods, is complex, time-consuming, and prone to human error. Further, NERC CIP requirements often infer security skill sets beyond those of many...

More attention is being paid to risks around the supply chain in the bulk electricity system (BES). When third-party vendors introduce new products, software and personnel into a power supplier’s environment, the potential for new cyber risks increases.For this reason, the North American Electric Reliability Corporation (NERC) recently added a new set of requirements to its Critical Infrastructure...

Some of our nation’s most critical physical infrastructure is represented by the national Bulk Electric Systems (BES). Today’s digital world relies upon this interconnected network of power generation and transmission systems more than ever. To ensure the reliability and resilience of that network, providers must continually manage threats to the infrastructure, including many that relate to...