Eclypsium_CJIS_Preso.pptx
PPTX presentation 10 MB Posted
- Solicitation number
- IFB- 25 - 082
- Issued by
- Pinellas County, Florida
About this file
The document is a PowerPoint presentation from Eclypsium regarding Criminal Justice Information Services (CJIS) Security Policy Version 5.9.2, specifically focusing on the City of St. Petersburg's Police Department's procurement of Eclypsium's firmware scanning software to meet CJIS requirement 5.9.2 SI-7 Software, Firmware, and Information Integrity Control. The presentation details Eclypsium's technology for assessing and detecting unauthorized changes to software, firmware, and information systems that contain or process Criminal Justice Information (CJI), with a particular emphasis on providing visibility, integrity, and security for systems "below the operating system."
The software solution extracts comprehensive host metadata including firmware, OS, and hardware information, with capabilities to analyze assessment data for threats, vulnerabilities, configuration risks, and change tracking. Eclypsium's technology focuses on endpoint PCs, servers, and networking devices, providing detailed extraction of information such as PCI & Option ROM firmware, bootloader information, BIOS, UEFI, SMBIOS, ACPI, TPM & PCRs, Intel ME/AMT, BMC, and NIC details. The solution is specifically tailored to help law enforcement agencies maintain the integrity of their critical information systems by detecting and responding to unauthorized modifications at a deep technical level.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Criminal Justice Information Services (CJIS) Security Policy Version 5.9.2 12/07/2022
SI-7 SOFTWARE, FIRMWARE, AND INFORMATION INTEGRITY
Control:
Employ integrity verification tools to detect unauthorized changes to software, firmware, and information systems that contain or process CJI; and
Take the following actions when unauthorized changes to the software, firmware, and information are detected: notify organizational personnel responsible for software, firmware, and/or information integrity and implement incident response procedures as appropriate.
From: https://le.fbi.gov/cjis-division-resources/cjis-security-policy-resource-center
© 2023 Eclypsium
WE ARE BELOW-THE-OS
Visibility | Integrity | Security
© 2023 Eclypsium
WHAT WE DO
ASSESSMENT_
Assessment data is analyzed for:
Threats—IOC/YARA Vulnerabilities Configuration Risks Change Tracking Known Good Verification
SENSOR_
EXTRACTION_
Firmware, OS, and hardware information is extracted, compressed, encrypted, and written to a file for transport.
Host metadata (IP/Mac/ OS info) Detailed hardware information PCI & Option ROM firmware Bootloader information
BIOS UEFI, SMBIOS,
ACPI
TPM & PCRs Intel ME/AMT
BMC, NIC
© 2024 Eclypsium
The Hidden Attack Surface
The Hidden Attack Surface
EDR/XDR
We Focus on Everything Below the OS
EDR/XDR
Endpoint PCs & Servers
Networking Devices
Thank You_ image2.png image6.jpeg image7.png image8.jpg image4.png image5.png image16.png image17.png image18.png image9.png image10.png image11.png image12.png image13.png image14.png image15.png image19.png image27.png image28.png image20.png image21.png image22.png image23.png image24.png image25.png image26.png image29.png image38.png image39.svg image40.png image41.svg image42.png image43.svg image44.png image45.svg image46.png image47.svg image30.png image48.png image49.svg image50.emf image51.emf image52.png image53.png image54.png image31.svg image32.png image33.svg image34.png image35.svg image36.png image37.svg image55.png image56.png image3.png image57.png
File details come from the government source that posted it. Updated .