ClearArmor : One Solution - ClearArmor CyberSecurity

What is ClearArmor® CSRP?

ClearArmor's CSRP framework is the most innovative advancement in Risks and Threats Management in the last two decades. CSRP's enhanced system is one of the best risks and threats management platform that enables your organization to truly achieve alignment with your organizational security standards of choice, such as DFS-500, COBIT, CIS, GDPR, ISO-27000, ISO-27001, NIST (CSF), NIST-171, etc. For the purpose of simplicity, we will be using the NIST CSF to define, describe, and highlight the components, and functionalities of ClearArmor.

The National Institute of Standards & Technology (NIST)'s CyberSecurity Framework (CSF) is a powerful piece of research in CyberSecurity and we are confident that if a corporation decides to implement ClearArmor with NIST's CSF recommendations and Controls, the chances are extremely good that their corporate goals for Safety and Security will be more than adequate.

While ClearArmor is an excellent choice for your CyberSecurity solutions, we can confidently state that while some products only address the technical portions of the CSF or provide high-level policy and governance functionality, ClearArmor is unmatched in this arena. CSRP is a unique combination of our proprietary, patent-pending Momentum Methodology (M²), and our innovative ICSP platform and technology suite. This combination is such a unique and effective approach that ClearArmor was one of only a handful of companies invited to participate in the NIST's National CyberSecurity Center of Excellence (NCCoE).

As a matter of fact, most Organizations are constantly in a state of catch-up and are under a great deal of pressure to manage their CyberSecurity risks. As such, they upgrade, patch, and monitor their networks, devices, and processes continuously – these activities must be managed, prioritized, and measured. They also need an accepted and established industry standard to evaluate their outcome, assess their current state of readiness, and to better predict their future desired state.

CSRP is a standards-based approach that provides leadership with the guidelines and continuous oversight necessary for the organization to achieve a robust and sustainable risk-free CyberSecurity environment. Adopting CSRP provides the organization the protection and liability-free defense in the event of a data breach.

Risk managers, regulators, legislators, and shareholders have begun to require that business leaders demonstrate greater involvement in and oversight of organizational CyberSecurity. ClearArmor's CSRP is a result of and influenced by Eracent's extremely strong capacity to collect millions of data sets and discover remote devices and nodes on a complex Corporate network. It is also in response to the CyberSecurity Enhancement Act of 2014, which calls for a "voluntary, consensus-based, industry-led set of standards, guidelines, best practices, methodologies, procedures, and processes to cost-effectively reduce cyber risks to critical infrastructure."

Momentum Methodology™ (M²)

M² bridges Technology, Leadership, and Process; it provides a standardized methodology that facilitates an in-dept understanding of the (CSF) & its implementation, yielding a continued improvement of the CyberSecurity Lifecycle.

M² spans 17 stages and is grouped into 4 phases (Acquire, Access, Plan, & Execute). It guides the process, removes noise that is often related to creating a CyberSecurity program, and focuses on true CyberSecurity Transformation. The focus facilitates the organization's migration from busy work to a quantifiably risk reducing state.

For the Practitioner tasked with shepherding the organization through M², an exhaustive practitioner’s guide starts as the foundation. Easing the process of collecting and making sense of disparate pieces of data, a Practitioners Workbook is also leveraged, resulting in a robust process, which encompasses the following: (a). Setup of the CyberSecurity Management Office tools, (b). The Current State of the overall CyberSecurity Program, (c). The Desired State of the overall CyberSecurity Program, (d). A Roadmap to get to the Desired State, (e). Assignment of Responsibility to implement elements of the program, (f). Assignment of Accountability for validating progress, (g). Ability to monitor Milestones & Budgets, (h). Implementation guidance for the Technology Tool Stack, and lastly (i). The ability to achieve an exhaustive and comprehensive CyberSecurity Transformation.

Intelligent CyberSecurity Platform (ICSP)™

ClearArmor’s ICSP™ provides a quantum leap forward in CyberSecurity risk mitigation, incident detection, and incident response. The ICSP has been designed to leverage detailed asset and network discovery techniques to learn how your staff and devices communicate with each other. The ICSP’s innovative design allows your team to analyze data, identify anomalous behavior, and proactively address anomalies and risks. Combine with its Technology Suite, ICSP provides real-time visibility and continuous reporting on the automated activities through work-flow, and program status through management dashboards. ICSP establishes the Cyber Governance Management Framework – zero trust - zero delay!

We designed the ICSP to be highly flexible, scalable, and adaptable. The ICSP comes equipped with industry−leading functionality, including SIEM and Intrusion Detection Solution (IDS) tools built in, so it can operate as a standalone product. However, if your organization has already deployed existing tools, our ICSP can interface with legacy systems, both commercial and home−grown. Our ICSP allows you to:

Understand your network

Your network includes your entire IT landscape, from subnets, to network devices, endpoints, operating systems, patches, hot-fixes, applications, and configurations

Prioritize information

You need to be able to correlate and prioritize information about, and coming from, networks, devices, and applications to properly secure your organization

Proactive automation

Today’s security solutions need to be dynamic and proactive, and to do this they must embrace and use machine learning, autonomics, and Big Data analytics to empower automation of security monitoring and responses, otherwise you are doomed to clean up messes rather than preventing them

Understand your organization

You need to understand how your organization uses and interacts with the whole network to fully secure it

Secure & integrate

You need to tear down information silos to effectively secure your organization, integrating information not only within your network, but also outside of it

Go beyond the perimeter

To be effective, a security solution can’t stop at the perimeter of your network. You have to assume that your perimeter can be breached, and be prepared to proactively identify and address any problems that arise

Click on the graphic's end-points to get the supporting research

Get a Copy of this PDF

As specified in the NIST Framework, "Tools supporting automated monitoring of some aspects of information systems have become an effective means for both data capture and data analysis." ClearArmor offers the required Ease of use, accessibility, and broad applicability across your Environment and ClearAromr can be readily deployed to render the necessary support and information in near real-time, facilitating a risk-free based decision making process.

The strategy is simple. “Build It Right, Then Continuously Monitor.” The RMF, when used in conjunction with the three-tiered enterprise risk management approach described in NIST SP 800-39 (Tier 1-governance level, Tier 2-mission/business process level, and Tier 3-information system level) and the broad-based continuous monitoring guidance in NIST SP 800-137, provides a comprehensive process for developing, implementing, and monitoring a CyberSecurity program capable of protecting core organizational missions and business functions from a range of threats, including cyber attacks. The NIST Vulnerability and Compliance Guideline (VAC) is of great importance in this matter and is worth a review; nevertheless, with ClearArmor, the whole process is handled comprehensibly and strategically implemented, effortlessly.

The ICSP’s Vulnerability and Compliance (VAC) process is unmatched and robust. It closes the loop between your assets and reducing the threat landscape. VAC is a game changer in understanding your vulnerabilities and driving remediations. VAC eliminates the need for pricey third-party scanning solutions, but plays well with your organizations legacy solutions.

ICSP’s InDiBots empower you with an army of persistent and adaptable robotic assistants that reduce the time needed to identify and respond to threats. With our add-on IT Asset Management suite, the InDiBots can even help you lower your total software and hardware costs, and help you automate system management and maintenance. ICSP™ manages the automated CyberSecurity program and deploys the following:

Real-time discovery of all network component
Cloud management
Virtual Machine Management
IOT and Mobile device management
Software and Hardware management
Whitelisting/blacklisting
Real-time hash management

Secure Software deployment
Application mapping
Port flow analysis
(military process) Penetration Testing
Automated configuration management
Patch management
Active Directory management

Through the ICSP™, the program establishes the baseline for the current architecture and focuses on increasing NIST defined CyberSecurity maturity.
The baseline is then compared against the target profiles established by leadership during M², and a detailed roadmap is created to allow the organization to move from its existing state to the target secure state.

Software As A Service – SaaS

For many organizations, having the flexibility to consume Software as a Service (Saas) is an attractive alternative to on-premise systems. Reducing CAPEX exposure and utilizing a favorable OPEX model, organizations have the flexibility to manage their costs in the manner that best meets their corporate objectives.

ClearArmor offers its ICSP as a Cloud Service. There are lots of great reasons to use the cloud:

Minimal commitments
Reduced management overhead
Rapid startup

Our platform can be offered from secure US and Global data center partners that meet FedRamp, FISMA certification when required.

Need more security or assurance?

The ClearArmor ICSP™ can be offered from secure US and Global data center partners that meet or exceed FedRamp and FISMA certification when required.

Delivery Methods

At ClearArmor, we understand that no two businesses are the same. That’s why we give you the freedom to deploy our Intelligent CyberSecurity Platform™ in the cloud, on−premises, or as a hybrid. Need even more security help?

On-Premises

If your staff is already adept at server installation and maintenance, our on−premises solution gives you more control over data storage and information access. Our preferred on−premises solution is packaged as its own network appliance, freeing you from the hassle of system sizing and configuration. The ICSP appliance is custom−configured to meet the ICSP’s unique workload demands. If you already have excess capacity in your data-center, ClearArmor’s team of professionals can help you configure virtual servers that support the ICSP and its mission to secure your network.

Hybrid

Even though many organizations have embraced the cloud, sometimes there are resources and information that the organizations just aren’t ready to trust to the cloud. From financial and human resources information to the organization’s core intellectual property, these resources are typically hidden away in carefully protected networks.
ClearArmor’s hybrid option leverages our SaaS ICSP to monitor portions of your network, while the core ICSP functionality and data are locked away in an on−premises instance of the ICSP.

Cloud-Based

Our cloud-based solution gives you the benefits of our patent-pending ICSP without the CapEx costs, administrative hassles, and network issues associated with deploying new servers in your datacenter.

No more buying equipment for your data-centers, wondering if the equipment is sized and configured properly.
No more system maintenance headaches.

With our SaaS ICSP, ClearArmor’s staff of skilled security professionals will handle all of that for you. Our SaaS ICSP can elastically grow or shrink as your network changes, helping you keep costs under control while still providing you with the information you need, when you need it. The SaaS version of our ICSP allows you to be up and running quickly, freeing you to focus on what you need to do: securing your network.

Need more security or assurance? The ClearArmor ICSP™ can be offered from secure US and Global data center partners that meet or exceed FedRamp and FISMA certification when required.

The ClearArmor Blockchain Enterprise Security Technology (CA-BEST) platform is a decentralized evolution of the Zero Trust Network Architecture of computers, running the same software to create a scalable, robust, encrypted, distributed, redundant, and open architecture. CA-BEST delivers a cost reduction potential, increases trust and credibility, while reducing the overall transaction processing latency.

CA-BEST is a private and decentralized blockchain digital innovation that stores its validated distributed and unalterable ledgers throughout the existing member nodes of the Enterprise. Each block contains data relevant to the history of the chain as well as a hash value that points to its preceding block, creating a transparent and highly secure peer-to-peer network that is impossible to compromise; a hacker would have to plan a simultaneous attack on every node to succeed.

CA-BEST automates blocks (ledgers) and transaction validation processes, which rely on a set of consensus rules (in conjunction with the Proof of Work) on the private Enterprise Permissionless Blockchain (Distributed Secure Database) Network. Each block on CA-BEST contains a hash of its preceding data blocks, hardening the blocks' redundancy and immutability.

As we are all aware, security risks exist in every aspect of digital technology, and blockchains are not immune to attacks completely; however, blockchains, with their decentralized storage platform are nearly or close to impossible to hack, thereby reducing the risk of data loss, completely.

More on this topic later, but for now, let's explore the potential of CA-BEST.

Legal

How would your organization defend itself in a court of law or to regulators in the event of a CyberSecurity incident?

CyberSecurity isn’t merely a technology issue, it is also a legal issue. From contractual obligations to maintain the confidentiality of certain information to legislative and regulatory requirements for how data is stored, when and how to notify affected parties in the event of a breach, and the like, your organization’s approach to CyberSecurity directly impacts its legal and business risks. ClearArmor CSRP helps your legal and IT staff work together to ensure the organization is meeting its regulatory and contractual obligations.

By employing CSRP, your legal department will be able to answer the following questions and more:

What role does our senior leadership play in defining our organization’s approach to CyberSecurity?
How often is the senior leadership informed about CyberSecurity issues, and who chooses the information presented to them?
To what regulations and contractual obligations is our organization subject?
Which industry standard(s) are we using as a basis for our approach to CyberSecurity?
How closely do we align with those standards?
What steps are we taking to address the gaps between our current state and our preferred alignment with those standards?
Have we documented why we have chosen to deviate from the standards?
What data are we collecting that evidence our compliance with our approach to CyberSecurity?
How often is that data audited?

The answers to these questions can be critical when your organization suffers a data breach.

Boardroom & C-Suites

What Are The Questions That Leadership Should be Asking?

The questions that leaders should be asking are the following:

What CyberSecurity standard are we using?
Why do CyberSecurity breaches happen?
How are employees educated about CyberSecurity?
What is the breach response plan?
Why do 68% of IT projects fail?

The bottom line is "Bad CyberSecurity Policy is Bad Business; it is estimated that Cyber crime will cause losses in excess $6 trillion by 2025."

Currently, prevailing wisdom is that CyberSecurity threats and losses can be avoided through the implementation of effective CyberSecurity policies and solutions. As a result, most Boards and C-level executives have deferred responsibility for CyberSecurity to their IT organizations. Industry standards illustrate how many enterprise using this approach to CyberSecurity, unnecessarily exposes itself, as well as to its customers, investors and even its own employees to a devastating financial difficulties.

Should your organization adopt some accepted framework or CyberSecurity based on industry standards? Which standards recommendations are right for your organization, and why? Why does CyberSecurity policy need to be a business imperative – as important as good fiscal policy? How do you raise awareness of the importance of adhering to good CyberSecurity policy? How do you measure the progress and cyber health of your organization?

The answer to these questions is ClearArmor’s CyberSecurity Resource Planning (CSRP) – a revolutionary approach to achieving standards-based, sustainable, and robust CyberSecurity – combining a patent-pending process methodology, with a proprietary advanced technology tool suite. ClearArmor’s CSRP provides a road-map for moving your organization away from ineffective and outdated CyberSecurity strategies and policies, and into alignment with established best practices. ClearArmor has created a comprehensive solution that introduces efficiencies into your organization that will reduce its CyberSecurity risk.

CSRP will also provide your organization with documented proof of the proactive steps leadership has undertaken, and continues to implement, to safeguard the organization’s valuable assets.

Risk Audit & Compliance

CyberSecurity threats are a significant enterprise risk and should be governed with the same rigor and discipline as other corporate risks. Effective governance depends upon robust and accurate metrics, which are often difficult to gather for CyberSecurity. Organizations face the business problem of managing the mitigation of CyberSecurity risk. Actual mitigation of the risk is done by many people performing detailed technical and human resource tasks. It is difficult to translate all the detailed activity into summarized metrics that are meaningful for interpretation.

Due to the complexities of Cyber threat mitigation, organizations struggle with proactively identifying the CyberSecurity metrics that they need for effective governance. Often the metrics are summarized surveys of opinions on the state of CyberSecurity in the organization, instead of an analysis of actual detailed performance data.

ClearArmor delivers an "Effective Metrics for CyberSecurity Enterprise Risk Management," which is a standards-based approach that provides guidance on the metrics needed for CyberSecurity risk identification and mitigation.

Cyber IT Asset Management (CITAM)

Why is IT Asset management a critical component of CyberSecurity programs?

Because you can’t secure what you can’t see. But, adopting the wrong ITAM solution can leave your organization with a false sense of security and significant exposure.

ITAM has to go far beyond leveraging tools, such as NMAP, WMI Scripts, and free zero footprint solutions. Being able to discover everything requires robust and advanced capabilities. ClearArmor ITAM has been implemented globally by Private and public sectors, Military and Industry, R&D and manufacturing, communications, managed services, etc. ClearArmor ITAM does not only "Discover" assets, it is capable of discovering precise and complete information about those assets, which includes all Hardware & Operating Systems, Patches, Software Peripherals, Ports, Interfaces, Connected Systems, Software Vulnerabilities, Lifecycle Data, Ownership, Shares, Logins, etc.

In fact, based on our research, we could not find any other system that is as complete in its discovery as ClearArmor. ClearArmor ITAM leverages the collected data and turn them into real-time useful information as indicated in the NIST CyberSecurity Framework, NIST Risk Management Framework, HIPAA 800-66, NY State DFS Rule 500, GDPR, CIS, COBIT, and more. Integrated IT Asset Management, when used in data mapping, becomes Cyber Information Technology Asset Management (CITAM).