SECURITY HARDENING SERVICES

Whether you’re engaged in FedRAMP specific activities or not, all organizations that have a compliance standard have a requirement to adhere to a framework of Baseline Configuration Hardening. Generally, the Center for Internet Security (CIS) benchmarks, SANS Critical Security Controls, and/or DoD DISA Security Technical Implementation Guides (STIGS).
NicheITS staff have a solid background in facilitating Baseline Configuration Hardening; leveraging open source industry tools to quickly provide hardened images for organizations and work to maintain those various golden images, meeting organizational requirements.

DEPARTMENT OF DEFENSE DISA STIGS

DISA Security Technical Implementation Guides or STIG’s are some of the most in-depth, rigorous, problematic, and time-consuming activities to perform within any organization for engineering staff. Solutions available in Azure and AWS for windows and linux images, that come pre-hardened, are an all or nothing solutions. The fact is, it’s the applications and permission settings within each image that require customization for a hardened image to be successful. STIG’s are often updated quarterly, leaving organizations consistently scrambling to create and update baseline images for operating systems and organizational devices. NicheITS specializes in offering professional services to meet organizational requirements in developing, trouble shooting, and documenting baseline image settings, to meet NIST 800-53 CM-2 and compliance requirements.

CENTER FOR INTERNET SECURITY TECHNICAL BENCHMARKS

While DISA STIG’s are the preferred and often recommended requirement when working with Department of Defense systems, FedRAMP’s basic requirement is to adhere to the CIS Level 1 and 2 benchmarks. CIS benchmarks are often updated annually. Much like requirements for creating and maintaining those baseline images, NicheITS specializes in offering professional engineering services to meet organizational requirements.