Security Configuration Management

Summary - Start Every Day Audit Ready

• Continuously monitors endpoint machines, identifies those machines that are non-compliant or mis-configured and returns those machines to the desired state.
• Broadest and deepest scan scope in the industry – over 200,000 attributes per machine.
• Builds a situational, surgical, and contextual remediation to return machines to compliance – no scripts to write, no human intervention.
• Enforces explicit policies, or uses an analytics based normative baseline to identify anomalous configurations.
• Comprehensive visibility provides a single view of the organizations configuration posture.
• Manages unauthorized applications, effectively eliminating the associated vulnerabilities.

Fully Automated Security Configuration Management

Triumfant enables organizations to secure critical organizational IT assets by minimizing the attack surface of the endpoint population through continuous enforcement of security configurations. Triumfant provides a platform to continuously monitor endpoint machines, readily identify those machines that are non-compliant or mis-configured and return those machines to the desired state. With Triumfant, you get a true view into the configuration posture of the endpoint population from the enterprise level down to each machine. Triumfant provides maximum visibility, fine-grained control, and delivers all of this functionality with minimal human intervention.

Triumfant takes security configuration management to the next level, eliminating the need to write scripts for remediation by automating the process of building a remediation that is surgical and situational for each problem detected. There are no scripts to write, no fixes to distribute. Triumfant applies the remediation without the need for intervention from IT support or the end user, and will return the machine to compliance without the need to re-boot or re-image. The result is every machine, every day security readiness and compliance with significantly reduced support costs, coupled with unparalleled visibility into the audit-ready state of the endpoint population.

Beyond explicit policies, Triumfant also leverages the normative baseline built by Triumfant's patented analytics to identify machines that have configurations anomalous with the endpoint population. Triumfant learns what is normal for each organization and uses this unique ability to identify compliance issues even when there is not a specific policy in place that covers a specific setting. Triumfant will even build a remediation to optionally return the anomalous machines to compliance with the population. This directly impacts risk by identifying and repairing anomalous configurations that may cause an exploitable vulnerability that opens the organization to attack.

Triumfant also excels at surgically and automatically removing unauthorized applications, eliminating major issues that potentially create system instability, open new vulnerabilities and undermine the ability of computers to do the work for which they are intended. Triumfant builds a normative whitelist that tracks every application running in the endpoint environment, and provides a full application inventory that shows a complete, actionable report of what is running in the organization’s environment. Administrators can be alerted when an anomalous application has been installed, and specific blacklist policies can immediately remove specific applications without intervention. This unique combination of whitelisting, greylisting, and blacklisting addresses the challenges caused by unauthorized applications with minimal labor costs, effectively eliminating the source of service disruptions and increased security risk.

Benefits

• Maintains every computer, every day compliance, effectively reducing the attack surface for each machine and lowering the IT security risk for the organization.
• Maximizes the effectiveness of other endpoint protections and configurations be ensuring that these protections are in working order and are properly configured.
• Significantly reduces support costs by automating policy and configuration enforcement and remediation of detected problems.
• Responds to problems with automated remediations that are situational, contextual, and completely reversible.
• Effectively removes unauthorized applications that represent needless support costs and unnecessary organizational risk.
• Promotes rapid adoption via out-of-the-box policies and an intuitive wizard driven interface to customize the policies for the particular needs of the organization.
• Increases visibility across the entire environment by enabling a broad view into the configuration and compliance status of the organization from the executive view to the details for every machine.

top

Features

• Complete control and flexibility in policy deployment

  via a policy template authoring environment that enables customers to develop their own policy templates or adapt existing policy templates. Policies can be deployed organization-wide or to smaller groups down to the individual machine level

• Support of Federal/NIST Compliance Initiatives

  with out-of-the-box policies for the following:
  
  • Federal Information Security Management Act (FISMA) Compliance
  • Federal Desktop Core Configuration (FDCC) Compliance
  • Security Content Automation Protocol (SCAP) Compliance
  • CyberScope Reporting (CyberScope certified)

• Support of common compliance initiatives:

  • Payment Card Industry Data Security Standard (PCI DSS) Compliance
  • Health Insurance Portability and Accountability Act (HIPAA) Compliance
  • Sarbanes-Oxley (SOX) Compliance

• Compliance Management Reporting

  enables unique views such as compliance status by device, requirement or rule, at varying detail levels, including a falling or expected to fall out of compliance in your environment

• Audit Trails

  present in-depth visibility of changes occurring over time and their impact on compliance status and system functionality.

• Automated change analysis

  provides a highly effective control for monitoring unplanned changes, providing the auditor with evidence necessary to judge the effectiveness of the change management program.

top