Secure enclaves for many industries
A secure enclave is an isolated work boundary with Analog Informatics Corporation (AIC) tools built in. It is useful in many industries, not only defense. The same kits run inside that boundary. The Level 2 kit includes the Level 1 kit. The Level 3 kit includes the Level 2 kit. The kits also run air-gapped, on a system that is not generally connected, and they run where a general network connection exists.
Use cases
| Industry | Enclave use | Air-gapped use | Kit modules |
|---|---|---|---|
| Defense and CMMC | Isolate Federal Contract Information and Controlled Unclassified Information | Run the kit where the site is not generally connected | Level 1, Level 2, and Level 3 kits |
| Government | Isolate a system that follows NIST Special Publication 800-53 | Keep privileged access and evidence inside the boundary | Same kits |
| Payments | Isolate systems that handle account data | Keep access control and audit on the isolated system | Privileged access, audit, and cryptography |
| Privacy | Isolate processing of personal data for GDPR or California privacy duties | Keep the access record on the isolated system | Identity governance, audit, and the Assessment Binder |
| Operational technology | Separate engineering access from plant operations under IEC 62443 or NERC CIP | Privileged access when the industrial network is not generally connected | Jump, Privileged User Management, and configuration compliance |
| Managed services | Let a Managed Service Provider administer inside the customer boundary | Carry the same controls to a customer site that is not generally connected | Privileged access and the shared Assessment Binder |
The Assessment Binder is the shared record for the assessor, the Managed Service Provider (MSP), and the customer. The kits receive constant feeds, generate alerts, mitigate issues, and constantly monitor system configuration compliance where a connection exists. On an air-gapped system, the same modules run inside the boundary.
Screenshots
More on Product screenshots.
Deployment and marketplace availability
Available now: Microsoft Azure Commercial Marketplace is the initial launch partner for AIC CMMC Completeâ„¢. All current Level 1, Level 2, and Level 3 kits are listed there. Customers can also install the solution themselves on any cloud they use.
Planned, based on customer demand: Google Cloud, Amazon Web Services (AWS), and Oracle Cloud marketplace support.
Planned, with implementation roadmaps based on customer demand: Government Community Cloud (GCC) and Federal Risk and Authorization Management Program (FedRAMP) environment support across cloud platforms.
Related References
- CMMC: Kits, Level 1, Level 2, Level 3, Defense contractors, C3PAO
- Defense contract requirements: SPRS score, DFARS 252.204-7012, DFARS 252.204-7021, NIST SP 800-171 self-assessment, CUI marking, CMMC Phase 2