Security Blanket® Certifications & Recognition

For Sales Information
call 1.866.230.1307
or email

For Technical Support call 1.866.230.1317
or email

Security Blanket® has been recognized and approved for use by various security organizations.

Industry Membership Participation

USnavylogo The PCI Security Standards Council™ has sought to facilitate the development of a worldwide community encompassing all areas of the payment card processing industry, in which all participants are able to review and discuss new versions of the PCI Security Standards, learn about Council initiatives, and share cross-sector experiences and best practices.

Approved Lists

USnavylogo

Security Blanket® is now included in the Department of the U.S. Navy’s Application and Database Management (DADMS) List

SANS Consensus Audit Guidelines (CAG) Top 20 Critical Controls User Vetted Tools List for Critical Controls #6, #8, and#11.

Validations

Validated on IBM Systems Application Advantage for Linux

NIAP Compliance

RTCS satisfies the requirements of the U.S. Government Department of Defense (DoD) and Intelligence Community (IC) and complies with NIAP and NSTISSP 11 requirements in the following manner:

RTCS uses either Red Hat Enterprise Linux v.5 or Sun Microsystems’ Trusted Solaris v.8 as the base OS for RTCS products. Both of these operating systems are NIAP approved, Common Criteria EAL-4 evaluated operating systems and serve as the security enforcement mechanism and “base” for all of the company’s commercial-off-the-shelf (COTS) products and custom solutions. After development (but before deployment) of a RTCS COTS product or a new customized capability, RTCS solutions are put through the full rigor of an accreditor-approved Independent Validation and Verification (IV&V) testing process. A typical IV&V activity for RTCS solutions is the NSA Certification, Test and Evaluation (CT&E) process, which includes a request by a Government customer to NSA for a Solution Security Assessment of the system, which includes full SR1-9 testing by NSA. After NSA performs the assessment, the findings are reported to the appropriate government body and/or Designated Approval Authority (DAA) for consideration as a part of the body of evidence for final approval. This comprehensive process has been in place for many years and has led to numerous successful accreditations and approvals for operational use.

NOTE: Red Hat Enterprise Linux v.5 (RHEL5) and Solaris v. 10 with Trusted Extensions are both Common Criteria (CCEVS) EAL4 evaluated against three (3) Protection Profiles: Label Security Protection Profile (LSPP), Controlled Access Protection Profile (CAPP) and Role-Based Access Control Protection Profile (RBACPP).