Question 1

What problem does Sicura solve?

Accepted Answer

Without a standard and repeatable process for compliance, system configurations will inevitably drift over their lifetime. What initially may have started off as a compliant system may severely fail audits months or years down the road. Sicura removes the uncertainty of compliance drift by ensuring that your systems will always have the proper compliance policies applied to them.

Question 2

Why would I need this?

Accepted Answer

Whether your organization has specific compliance regulations to meet based on your industry, or you are looking for best practices to apply to your IT infrastructure, Sicura can help.

Question 3

Who is Sicura for?

Accepted Answer

Sicura was built for all layers of IT organizations as a complete compliance and configuration management solution. Operations and DevOps Engineers appreciate the access to all compliance and system-level configuration data while Security Professionals and Managers can quickly address issues or generate reports to track compliance health.

Question 4

Is Sicura a scanner?

Accepted Answer

Sicura contains open source scanners, and provides integration with other popular evaluation tools such as CIS-CAT, in order to allow you to evaluate your compliance. Sicura takes the results generated by those scanners and gives you the ability to act instantly on any findings either by one-click remediation or by access to the data that allows you to continuously enforce and monitor any compliance requirement.

Question 5

Does Sicura work in cloud environments or on-premises?

Accepted Answer

Both! Sicura is infrastructure agnostic and works seamlessly in a number of cloud environments, physical data centers, or a hybrid environment of both.

Question 6

What compliance standards can Sicura help me address?

Accepted Answer

Sicura provides profiles for a number of common compliance standards and requirements such as the DISA STIGs, NIST 800-53, NIST 800-171, PCI-DSS, CIS Benchmarks, CMMC, GDPR, SOX, HIPAA, as well as custom organizational policies and rules.

Question 7

What benchmarks does Sicura support?

Accepted Answer

Sicura SCM is built to align with industry-leading security benchmarks and regulatory frameworks, including: Cybersecurity Maturity Model Certification (CMMC) Levels 2 and 3 NIST SP 1800-172 guidelines for enhanced system protection Center for Internet Security (CIS) Benchmarks for cloud, on-prem, and hybrid environments Continuous Authority to Operate (cATO) enforcement for government agencies By implementing these benchmarks, Sicura helps organizations maintain a proactive and standardized security posture.

Question 8

What platforms does Sicura support?

Accepted Answer

Sicura SCM supports a wide range of platforms, including various Red Hat Enterprise Linux (RHEL) distributions and Windows environments. For a detailed list of supported platforms, visit our product page.

Question 9

Can Sicura help me pass my audits?

Accepted Answer

Absolutely! Sicura can provide both scheduled and on-demand scans. Additionally, Sicura has built-in reporting so that you not only have a clear picture of your compliance posture at any time, but can also generate reports to support internal and independent audits.

Question 10

Does Sicura SCM help me meet DISA STIG requirements?

Accepted Answer

Yes, Sicura’s SCM continuously enforces compliance with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs). Our platform automates security control assessment, configuration management, and remediation, ensuring that your systems remain hardened against vulnerabilities and misconfigurations at all times.

Question 11

Does Sicura integrate with AWS?

Accepted Answer

Yes, Sicura seamlessly integrates with AWS to enhance security automation and enforcement. Our platform enables you to apply security profiles to build custom Amazon Machine Images (AMIs), enforce real-time security control validation, and automate remediation across AWS environments. This ensures your cloud infrastructure aligns with Secure-by-Design principles while maintaining a strong security posture.

Question 12

How is Sicura different from other tools on the market?

Accepted Answer

Many products on the market scan and assess your environment, while others offer the ability to enforce or remediate some failures, but we do all of the above. We are the only out-of-the-box solution which provides continuous enforcement of compliance policies while also tying in actionable data directly to scan results.

Question 13

Can Sicura operate in an air-gapped environment?

Accepted Answer

Yes, Sicura’s Security Control Management (SCM) platform is designed to function in air-gapped environments and network-isolated enclaves. Our solution allows you to build a custom ISO containing all necessary security controls and policies, enabling seamless deployment and continuous enforcement of security baselines, even in restricted environments.

Question 14

What operating systems do you support?

Accepted Answer

Sicura supports Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019. Sicura also supports RedHat Enterprise Linux (RHEL) 7, 8, CentOS 7, 8, and Oracle Enterprise Linux 7, 8.

Question 15

Is Sicura agent-based or agent-less?

Accepted Answer

Sicura was initially developed as an agent-based solution for continuous compliance enforcement, but has now been adapted to work in either an agent-based or agent-less configuration.

Question 16

What is compliance?

Accepted Answer

Compliance is the foundation of trust on which cybersecurity is built. Without a compliant baseline, other cybersecurity efforts can be nullified by basic attacks that standard compliance can help prevent.

Question 17

I'm intrigued. Now what?

Accepted Answer

Book a demo with our team. We’ll show you how the product works, learn how Sicura could work with your system, and set up a Proof of Concept so you can see the product in action. Our average time from demo to full deployment is 6 weeks. Get in touch today!

Cybersecurity

The Need for Automated DevOps Security: Guest Article by Dr. Edward Amoroso, TAG Cyber CEO

The Six Stages of Cyber Risk and Compliance Automation

The Five Most Common Security Misconfigurations & Their Fixes

Case Study on Sicura: Part 4 in TAG Cyber Series

Key Takeaways from the MS-ISAC Annual Meeting

What We Mean When We Say Zero Trust