Shavlik Selected by FDIC for Compliance Solution to Simplify FISMA Reporting Requirements

Business Wire, Nov 27, 2007

Shavlik NetChk Compliance Helps FDIC Meet Government Mandates That Require Proof of Configuration Security

ST. PAUL, Minn. -- Shavlik Technologies, LLC, the market leader in simplifying complex enterprise network configuration, compliance and security, today announced that the Federal Deposit Insurance Corporation (FDIC), an independent agency of the US federal government, recently selected Shavlik NetChk([R]) Compliance to simplify and automate the process of managing and proving compliance with new FISMA requirements.

The Federal Information Security Management Act of 2002 is a US federal government regulation established to bolster computer and network security within the Federal Government and affiliated parties (such as government contractors) by mandating yearly audits of IT controls. FISMA now requires agencies to develop acceptable system configuration requirements and report on compliance with the configuration requirements during their annual FISMA audit.

The FDIC has implemented Shavlik NetChk Compliance to simplify and automate the development of system configurations and policies, apply them across all systems on the network, and easily generate reports on system compliance to provide to the Office of the Inspector General during their annual FISMA audit.

"We are pleased that the FDIC has selected Shavlik NetChk Compliance to reduce overall risk and support their new requirements for FISMA reporting," said Mark Shavlik, CEO for Shavlik Technologies. "Many organizations today are placing a higher level of importance on maintaining secure and consistent system configurations, as the industry in general recognizes the major threat that mis-configured systems pose to a network. Our solutions make it very easy for customers to generate and distribute approved configurations, and then automate the process for ongoing assessment, remediation and management of systems to ensure network-wide compliance."

About Shavlik NetChk Compliance

Shavlik's compliance management solution is fully automated to easily manage critical system and security configurations. Shavlik NetChk([R]) Compliance makes it easy to establish and enforce a security configuration baseline, while helping to preserve organizational security and complying with either governmental or industry based regulations. This approach helps reduce the risk of systems being out of compliance with a stated policy.

With Shavlik NetChk Compliance, an organization can create or import policies or mandated configurations, and then automatically clone and distribute them to other systems across the network. Once in place, Shavlik is uniquely positioned to enforce each policy while helping reduce the cost of compliance, and improving the likelihood of passing an audit.

About Shavlik Technologies

Shavlik Technologies, LLC is the market leader in the simplification of complex enterprise network configuration, compliance and security. Shavlik's solutions support an organization's need for Active Vulnerability Management([R]) - the automated and continual process for preventing, detecting, and removing critical security threats from corporate networks while maintaining policy-driven security configurations.

Founded in 1993, Shavlik Technologies is the de facto industry standard for patch management solutions. With more than 10,000 customers worldwide, Shavlik is trusted to provide the most up-to-date security patch data and the most comprehensive discovery capability to maintain a customer's overall network security integrity. Company CEO Mark Shavlik is a founder of the patch management industry as he teamed with Microsoft in 1999 to create the patch engine for Microsoft Base Security Analyzer (MBSA). This technology is still used by an installed base of millions of users across the globe. Shavlik also licenses its technology to more than 20 leading security companies such as IBM, BMC, Symantec and iPass. Shavlik's products have won multiple awards from leading industry trade journals. For more information, contact Shavlik at www.shavlik.com or call 1-800-690-6911 or 1-612-331-6737.

Shavlik Technologies is a registered trademark in the United States and certain other countries, of Shavlik Technologies. Additional Shavlik product names are either registered trademarks or trademarks of Shavlik Technologies. All other trademarks mentioned in this document are the property of their respective owners.