Date: 02/22/2024
Vendor: Cimcor
Technology/Topic: Delivering Integrity Assurance with CimTrak – Monitoring, Measuring, and Enforcing the Workload Integrity and Security Posture Throughout the Enterprise
TEM Video (milTube): https://www.milsuite.mil/video/watch/video/68043
______________________________________________
Welcome to the Technical Exchange Meeting (TEM)!
The CimTrak Integrity Suite, developed by Cimcor, is a robust security, compliance, and integrity assurance tool that offers real-time integrity monitoring, assessment, and remediation of IT assets. Those capabilities include system hardening, configuration management, change control, change prevention, roll-back and remediation, allow-listing, file reputation, digesting STIX/TAXII feeds, and a workflow that enables change reconciliation by comparing authorized changes against observed changes.
This solution has the unique ability to DETECT unknown, unwanted, and unauthorized changes (both malicious and circumvented) in real-time and restore them to previously trusted baselines of operation in seconds. CimTrak is currently installed in all military branches, DoD, and various US government agencies.
CimTrak is Tenet #5 in NIST 800-207 Zero Trust Architecture – The enterprise monitors and measures the integrity and security posture of all owned and associated assets.
— Patented real-time change detection and remediation
— 1st and ONLY integrity software in the world to be Common Criteria certified EAL (Evaluation Level Assurance) Level 4+
— 1st and ONLY integrity software to be placed on the United States Defense Information Systems Agency Unified Capabilities Approved Products List
— 1st Integrity management product to receive Continuous Diagnostics & Mitigation (CDM) approval
______________________________________________
To join the DISA TEM mailing list, please contact: disa.tem@mail.mil
______________________________________________
Disclaimer:
— TEMs do not serve as a marketing venue or request for proposal actions.
— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.
— TEMs do not serve as an endorsement of any presented technologies or capabilities
— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.
— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly facing content is permissible in DISA TEM sessions.