2
GoldDisk Plus ™ for Amazon Web Services ™ Revoluonizing STIG Compliance in the Cloud GoldDisk Plus is a DoD STIG- hardened Windows 2008 R2 or 2012 R2 Amazon Machine Image (AMI). GoldDisk Plus allows customers to quickly establish DISA Security Technical Implementaon Guide (STIG) compliant servers in the Amazon Web Services (AWS) cloud environment. As a lead- ing provider of informaon assurance (IA) products, SteelCloud developed GoldDisk Plus as a direct result of our real-world DoD customer experience. The real “plus” in GoldDisk Plus is the unique technology that SteelCloud de- veloped to automate ongoing STIG policy maintenance. GoldDisk Plus can reduce IA costs by more than 70%, while increasing systems availability by dramacally reducing down-me due to policy or configuraon maintenance er- rors. GoldDisk Plus allows government customers, and those organizaons that support them, to reduce the cost and effort for implemenng and maintaining compliant sys- tems in the Amazon cloud environment. The Server Policy Problem Maintaining server STIG policy sengs is by far the most me and labor intensive of the systems administraon func- ons. Frequently, the manual policy implementaon and update process results in unplanned server downme, negavely impacng costs and user producvity. In working with our customers, we calculate that the government spends thousands of dollars annually, per server instance (both physical and virtual), to maintain server security policy compliance. While cloud services provides tremendous speed and flexibility in establishing and supporng IT infrastructures, STIG compliance has remained a manual labor-intensive task — unl now! Revoluonizing STIG Policy Support with ConfigOS™ GoldDisk Plus goes well beyond providing a simple up-to- date STIG-complaint OS image. The “plus” in GoldDisk Plus is ConfigOS, our revoluonary tool for STIG policy interroga- on and remediaon. ConfigOS ulizes this new patent- pending technology, that converts STIG policy into machine readable secure XML signatures, to automate the remedia- on of producon servers. ConfigOS automates security policy remediaon by applying simple XML signatures – even across disconnected networks and security domains. The tradional mul-day/mul-week STIG policy update and tesng process now takes as lile as 5 minutes - reducing server security policy maintenance expenses by over 70%. Addionally, ConfigOS is a low disrupon plaorm, requiring no security, network, or infrastructure changes. GoldDisk Plus Impacts Ongoing Expense Reducon Implement new applications with “commercial” agility Reduces staff requirements for policy/STIG implementation/testing Increases systems availability by eliminating policy-related errors Consistent STIG policy update process - easy to implement, document, and support ConfigOS is the PLUS XML signatures validate STIG policy and system configuration Option for automated validation and/or one button remediation Unique ConfigOS signatures can be created in minutes And being a started task, ConfigOS will not affect throughput or AWS machine sizing or capacity. Now is the Time Take advantage of cloud services today without the tradional effort to establish and maintain STIG- compliant systems. Move your applicaons into the cloud at “commercial speed” with GoldDisk Plus. Whether establishing new or maintaining an exisng AWS infrastructure, SteelCloud can help to signifi- cantly reduce your organizaon’s cost and effort for maintaining STIG compliance. And, GoldDisk Plus with ConfigOS, pays for itself the very first me you use it! Reducing the Cost for Implemenng and Supporng STIG Compliant Systems in AWS ™ TM Now Available for Windows 2012
