Tuesday, May 10th, 2011 - Tripwire, Inc.
Tripwire, a leading global provider of IT security and compliance automation solutions, today announced that it has implemented the Australian Government Information Security Manual (ISM) as a standard Tripwire policy. Using Tripwire® Enterprise, customers can now automatically apply policy tests to help them meet the configuration requirements within the "Information Technology Security" section of the standard. The Australian ISM serves as an important component of the government's security strategy to mitigate risk to local information and systems, making it a required standard for agency compliance.

Cyber threats can emerge from a wide range of sources including individuals, issue motivated groups, organized criminal syndicates and nation states. Improving cyber defense is a top national security priority, and the Australian government has invested significantly in enhancing cyber security capabilities over a number of years. The Australian Government Department of Defense, the Defense Signals Directorate (DSD), produced the Australian Government ISM to provide policies and guidance to its government agencies on how to protect and govern the security of their ICT systems.

"Tripwire is committed to providing out-of-the-box policies, not just for global standards such as PCI and ISO 27001, but also local standards such as the Australian Government ISM and the Monetary Authority of Singapore Internet Banking Technology Risk Management," said Robert T. Kidd, APAC Managing Director, Tripwire. "This solution will enable Australian government agencies and other organizations to automate and simplify their compliance with major portions of the ISM standard. Tripwire also enables agencies and enterprises alike to further customize for their own unique needs."

The Australia ISM standard mandates a change control process, requiring agencies to implement and maintain tools and procedures covering the detection of potential cyber security incidents. Tripwire Enterprise file integrity monitoring capabilities ensure that all changes to critical files and configurations are immediately identified, and unauthorized changes are rapidly flagged. Benefits include:
Federal agencies can easily and immediately determine whether or not they are in compliance with the ISM government standard
Tripwire's continuous compliance capabilities immediately alert users when a change occurs that takes it out of compliance with the ISM policy
Tripwire's automated remediation makes it quick and easy to reconfigure devices to meet ISM configuration standards

The ISM standard also mandates log retention, auditing and protection, which Tripwire comprehensively addresses with Tripwire Log Center®. When used as part of the Tripwire VIA(tm) suite -- which includes Tripwire Enterprise for industry-leading configuration control and Tripwire Log Center for next generation log and event management -- organizations can significantly simplify the cost and effort of maintaining compliance with the ISM standard, while also ensuring IT security. Organizations outside of the Australian government can also apply these best practices to improve their security strategy and customize it to meet specific internal security standards.

Tripwire ISM policies are currently available for Windows 2003, Windows XP and Solaris 10, with additional platforms and device types planned. Each policy consists of approximately 400 pre-defined configuration tests, with remediation advice and automated remediation included. Tests are categorized based on the six classification levels specified in the standard, so users can customize their assessments to meet their specific classification requirements -- for example, unclassified, confidential, top secret, etc. For more information, please contact the Tripwire Australia sales offices at 0402 138 980 or via email at [email protected]

Contact Profile

Tripwire, Inc.


Tripwire is a leading global provider of IT security and compliance automation solutions that help businesses and government agencies take control of their IT infrastructure. Thousands of customers rely on Tripwire's integrated solutions to help protect sensitive data, prove compliance and prevent outages. Tripwire VIA, the comprehensive suite of industry-leading file integrity, policy compliance and log and event management solutions, is the way organizations proactively achieve continuous compliance, mitigate risk, and ensure operational control through Visibility, Intelligence and Automation. Learn more at www.tripwire.com and @TripwireInc on Twitter.
Nicole Andergard
P: 503.276.7541
W: www.tripwire.com

Keywords

Tripwire Implements Key Australian Government Standard Improved Cyber Defense

Categories

Sharing

More Formats