Secure enclaves for many industries

A secure enclave is an isolated work boundary with Analog Informatics Corporation (AIC) tools built in. It is useful in many industries, not only defense. The same kits run inside that boundary. The Level 2 kit includes the Level 1 kit. The Level 3 kit includes the Level 2 kit. The kits also run air-gapped, on a system that is not generally connected, and they run where a general network connection exists.

One enclave, many industriesA center box labeled secure enclave has labeled lines to defense, government, payments, privacy, and operational technology. A second label reads air-gapped or generally connected.Secure enclaveDefenseGovernmentPaymentsPrivacyOperationaltechnologyAir-gapped or generally connected
Defense, government, payments, privacy, and operational technology each use the same isolated kit boundary.

Use cases

Industry Enclave use Air-gapped use Kit modules
Defense and CMMC Isolate Federal Contract Information and Controlled Unclassified Information Run the kit where the site is not generally connected Level 1, Level 2, and Level 3 kits
Government Isolate a system that follows NIST Special Publication 800-53 Keep privileged access and evidence inside the boundary Same kits
Payments Isolate systems that handle account data Keep access control and audit on the isolated system Privileged access, audit, and cryptography
Privacy Isolate processing of personal data for GDPR or California privacy duties Keep the access record on the isolated system Identity governance, audit, and the Assessment Binder
Operational technology Separate engineering access from plant operations under IEC 62443 or NERC CIP Privileged access when the industrial network is not generally connected Jump, Privileged User Management, and configuration compliance
Managed services Let a Managed Service Provider administer inside the customer boundary Carry the same controls to a customer site that is not generally connected Privileged access and the shared Assessment Binder

The Assessment Binder is the shared record for the assessor, the Managed Service Provider (MSP), and the Customer. The kits receive constant feeds, generate alerts, mitigate issues, and constantly monitor system posture where a connection exists. On an air-gapped system, the same modules run inside the boundary.

Screenshots

Screenshots come from a demonstration system. Host names, account names, and network addresses are replaced with sample values.

One inventory of every system, with or without an agent, filtered by scope and classification.

More on Product screenshots.