Thales eSecurity assists with data security compliance for FIPS 199 and FIPS 200
Regulation
Active now
FIPS Publication 200 is a mandatory federal standard developed by NIST in response to FISMA. To comply with the federal standard, organizations first determine the security category of their information system in accordance with FIPS Publication 199. Thales eSecurity can help you meet the FIPS 200 and FIPS 199 data security compliance standards.
According to NIST Special Publication 800-53, Revision 4:
FIPS Publication 200, Minimum Security Requirements for Federal Information and Information Systems, is a mandatory federal standard developed by NIST in response to FISMA. To comply with the federal standard, organizations first determine the security category of their information system in accordance with FIPS Publication 199, Standards for Security Categorization of Federal Information and Information Systems, derive the information system impact level from the security category in accordance with FIPS 200, and then apply the appropriately tailored set of baseline security controls in NIST Special Publication 800-53, Security and Privacy Controls for Federal Information Systems and Organizations.
Organizations have flexibility in applying the baseline security controls in accordance with the guidance provided in Special Publication 800-53. This allows organizations to tailor the relevant security control baseline so that it more closely aligns with their mission and business requirements and environments of operation.
FIPS 200 and NIST Special Publication 800-53, in combination, ensure that appropriate security requirements and security controls are applied to all federal information and information systems. An organizational assessment of risk validates the initial security control selection and determines if additional controls are needed to protect organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, or the Nation. The resulting set of security controls establishes a level of security due diligence for the organization.
Core Thales eSecurity capabilities that help meet FIPS 199 and FIPS 200 compliance standards include:
In addition to helping you comply with FIPS 199; FIPS 200; FISMA; NIST 800-53, Revision 4; FIPS 140-2; and FedRAMP, Vormetric security solutions from Thales eSecurity are designed to help you comply with:
The Vormetric Data Security Platform from Thales eSecurity is the only solution with a single extensible framework for protecting data-at-rest under the diverse requirements of Federal Agencies across the broadest range of OS platforms, databases, cloud environments and big data implementations. The result is low total cost of ownership, as well as simple, efficient deployment and operation.
Vormetric Transparent Encryption from Thales eSecurity provides file and volume level data-at-rest encryption, secure key management and access controls required by regulation and compliance regimes.
Vormetric Key Management from Thales eSecurity enables centralized management of encryption keys for other environments and devices including KMIP compatible hardware, Oracle and SQL Server TDE master keys and digital certificates.
Vormetric Security Intelligence from Thales eSecurity provides another level of protection from malicious insiders, privileged users, APTs and other attacks that compromise data by delivering the access pattern information that can identify an incident in progress.
Vormetric Application Encryption enables agencies to easily build encryption capabilities into internal applications at the field and column level.
Vormetric Tokenization with Dynamic Masking from Thales eSecurity lets administrators establish policies to return an entire field tokenized or dynamically mask parts of a field. With the solution’s format-preserving tokenization capabilities, you can restrict access to sensitive assets, yet, at the same time, format the protected data in a way that enables many users to do their jobs.
Critical to certification for meeting FIPS, is the implementation of security controls from NIST 800-53, Appendix F. Focusing on the capabilities needed to meet these requirements, this paper provides background about the Thales Data Security Platform and the Thales Transparent Encryption product that is delivered through that platform....
By Securosis analysts and industry experts, Rich Mogull, CEO and Adrian Lane, CTO.
This paper cuts through the confusion to help you pick the best encryption and tokenization options for your projects. The focus is on encrypting in the data center: applications, servers, databases, and storage. It also covers cloud computing (IaaS: Infrastructure as a Service)....
Mandate
Active now
Since June 5, 2014 federal agencies have been required to meet FedRAMP standards, ensuring they meet internal data security standards and extended security controls for cloud-computing.
Learn More Regulation
Active now
These regulations cover healthcare information in the US, HIPAA relates to protection; encryption, key management. etc and HITECH relates to disclosure of data breaches.
Learn More Regulation
Active now
United States Federal Law setting standards for a range of US companies, SOX Act sections 302 and 404 relate directly to data protection.
Learn More
Verschlüsselung von Vormetric liefert genau das, was wir brauchen, ohne Probleme oder großen Aufwand. Zu wissen, dass es da ist, bedeutet, sich um eine Sache weniger Sorgen machen zu müssen.Albert AvilaBusiness Solutions Specialist, Fujitsu America, Inc.
Es gibt absolut keine spürbaren Auswirkungen auf die Performance oder Benutzerfreundlichkeit der Anwendungen. Ich bin begeistert davon, wie einfach diese Lösung zu implementieren ist, und sie hat bisher immer einwandfrei funktioniert.Christian MuusDirector of Security for Teleperformance EMEA
Die Implementierung von Vormetric hat ein zusätzliches Maß an Vertrauen in die Beziehung zu unseren eigenen Kunden gebracht; sie wissen, dass wir es mit der Pflege ihrer Daten ernst meinen.Audley Deansenior director of Information Security,
BMC Software
Der Ansatz von Vormetric, die Zugriffskontrolle mit der Verschlüsselung zu koppeln, ist eine sehr leistungsfähige Kombination. Wir nutzen es, um unseren Kunden unser Engagement für die Sicherheit und Integrität ihrer Testfälle, Daten und Designs zu demonstrieren.David VargasInformation Security Architect
Cadence Design Systems
Meine Bedenken bei der Verschlüsselung bezogen sich auf den Mehraufwand für die Benutzer- und Anwendungsperformance. Mit Thales eSecurity merken die Mitarbeiter nicht einmal, dass es überhaupt läuft.Karl MudraCIO
Delta Dental of Missouri
Die Vormetric-Lösung entspricht nicht nur allen unseren Verschlüsselungsanforderungen, sondern sie beseitigt auch unsere Bedenken hinsichtlich der Komplexität und des Mehraufwands für die Verwaltung der Umgebung, sobald sie einmal implementiert wurde.Joseph Johnson,chief information security officer CHS
Als weltweit führender Anbieter von Zahlungslösungen und Commerce Enablement ist es die Strategie von Verifone, „Best in Class“-Zahlungslösungen und -dienstleistungen zu entwickeln und bereitzustellen, die die globalen Sicherheitsstandards erfüllen oder übertreffen und unseren Kunden dabei helfen, elektronische Zahlungen über alle Handelskanäle hinweg sicher zu akzeptieren. Wir haben uns für Hardware-Sicherheitsmodule (HMS) von Thales entschieden, da sie robuste Sicherheit, unübertroffene Leistung und ausgezeichnete Skalierbarkeit bieten ...
Joe Majka,Chief Security Officer
