Threat-Based Methodology Part 2: Configuration Settings
This is the second post in the Threat-Based Methodology series. The first post introduced Threat-Based Methodology and the analysis conducted by the FedRAMP PMO and NIST. That post concluded with a list of the top seven controls based on their Protection Value. This post will explore CM-6 in greater depth and explain how Devo supports the ability to meet this control.
CM-6, Configuration Settings, was determined to provide the most Protection Value with a score of 208.86. Let’s take a closer look at CM-6.
CM-6 is described within NIST 800-53 Rev 5 as:
- Establish and document configuration settings for components employed within the system that reflect the most restrictive mode consistent with operational requirements using [Assignment: organization-defined common secure configurations];
- Implement the configuration settings;
- Identify, document, and approve any deviations from established configuration settings for [Assignment: organization-defined system components] based on [Assignment: organization-defined operational requirements]; and
- Monitor and control changes to the configuration settings in accordance with organizational policies and procedures.
It’s easy to understand why this provides the most protection. If you harden your systems as much as possible while still enabling functionality, you effectively minimize the threat surface. Reducing the threat surface reduces the effectiveness of an attacker’s attempts and reduces the stress on the company’s incident detection and response capabilities.
Devo supports CM-6 through either the use of the Devo Endpoint Agent or integrations with existing configuration monitoring tools.
Devo Endpoint Agent
Devo Endpoint Agent is a multi-operating system, low-footprint endpoint analytics and instrumentation tool. It is available for Windows, Linux, and macOS systems. Regarding CM-6, the Endpoint Agent can retrieve from the host system information regarding the hardware configuration, operating system versions, installed applications and extensions, etc. You’ll find more detailed information on Devo Endpoint Agent in our documentation.
Devo Endpoint Agent operates by using pre-configured system queries. Devo has created specific queries to retrieve relevant information for configuration, events, status, performance, and files. Using these queries, the user can gain a deep understanding of the configuration and status of the system. This information is forwarded to Devo Endpoint Manager which manages all of the deployed agents. Endpoint Manager then forwards the data to the Devo cloud.
Integrations
Devo has many out-of-the-box integrations that support CM-6. Those relevant to CM-6 include Tenable.io, Carbon Black, Rapid7, SentinelOne, and CrowdStrike. For more, see the full list of integrations.
Once in Devo
Once the configuration data is in Devo, either through Endpoint Agent or from integrations, the data is ready to be processed and queried. At this point the full capabilities of Devo are available to analyze the configuration data, create alerts for non-compliant systems, create dashboards, and leverage the Devo Security Operations and Service Operations applications.
The final post in our series will explore the AU-6 family of controls deeper, and how Devo supports meeting these controls.
Related Blog Posts
Cybersecurity, Education, Market Intelligence
This year’s annual EDUCAUSE Conference took place in San Antonio, Texas, where higher education leaders shared key insights into top edtech trends, priorities and challenges shaping the higher education landscape. The 2025 Educause Top 10 priorities list addresses how higher education technology and data leaders can work together to restore trust within the education sector by building competent and caring institutions through collaboration, consistent results and shifting from monolithic systems and processes to more flexible and unified solutions.
Yvonne Maffia
Big Data, Cybersecurity, Market Intelligence, Technology
Hello from DoDIIS in Omaha, Nebraska! TDSYNNEX Public Sector is once again attending, so if you didn’t make it out to the city that invented the Reuben sandwich, we’ve got you covered. The conference kicked off with a heavy focus on several prevailing themes, notably: cybersecurity, deterrence, interoperability, and data centricity. If you read that list and thought AI was missing – fear not – it was included in discussions, but primarily as a vehicle for aiding in the intelligence community’s (IC) top priorities.
Susanna Patten
Cybersecurity, Market Intelligence, State & Local Government, Technology
The 2024 National Association of State Chief Information Officers (NASCIO) Annual Conference took place in New Orleans, Louisiana earlier this month, where state leaders shared key insights into FY25 top technology priorities, challenges and lessons learned. Some of the key focus areas included AI, with emphasis on generative AI (Gen AI) tech, data management, governance, privacy and accessibility, cybersecurity and risk management and digital services and modern government.
Yvonne Maffia
Cybersecurity, Market Intelligence, State & Local Government, Technology
The 2024 National Association of State Chief Information Officers (NASCIO) Annual Conference took place in New Orleans, Louisiana earlier this month, where state leaders shared key insights into FY25 top technology priorities, challenges and lessons learned. Some of the key focus areas included AI, with emphasis on generative AI (Gen AI) tech, data management, governance, privacy and accessibility, cybersecurity and risk management and digital services and modern government.
Yvonne Maffia
AI, Cybersecurity, Market Intelligence
This month marks the 20th anniversary of the declaration of “Cybersecurity Awareness Month,” originally created by the Department of Homeland Security and the National Cyber Security Alliance in 2004. Since then, we’ve seen vast amounts of change and innovation in the sector. We’ve also seen continually updated legislation, new technology and opportunities for IT companies to penetrate the market as federal agencies continue to watch threats evolve.
Susanna Patten
Federal Fiscal Year End, Federal Government, Market Intelligence, Technology
At this point, anyone keenly watching the budget process every year can tell you the likelihood of a continuing resolution (CR) being passed as opposed to a new budget by Oct 1st is all but guaranteed. CRs act as a temporary stopgap designed to avoid a government shutdown. However, it also locks funding to the previous fiscal year’s level and prevents new projects from getting started. Projects then remain under operations and maintenance until a new budget, with new requirements, is passed.
Susanna Patten
Cybersecurity, Federal Government, Market Intelligence, Technology
The US military information network comprises over 15,000 classified and unclassified networks facilitating information exchange for service members worldwide. Known as the Department of Defense Network (DoDIN), it includes devices such as computers, mobile phones, weapons, servers, and data systems consistently serving military personnel at all levels. Data sharing across these devices has been under frequent threats of cyberattacks by adversaries and necessitates keen vigilance by the Defense Information System Agency (DISA) to manage risks and vulnerabilities.
Toan Le
Cybersecurity, Federal Government, Market Intelligence, Technology
The US military information network comprises over 15,000 classified and unclassified networks facilitating information exchange for service members worldwide. Known as the Department of Defense Network (DoDIN), it includes devices such as computers, mobile phones, weapons, servers, and data systems consistently serving military personnel at all levels. Data sharing across these devices has been under frequent threats of cyberattacks by adversaries and necessitates keen vigilance by the Defense Information System Agency (DISA) to manage risks and vulnerabilities.
Toan Le
AI, Education, Market Intelligence, State & Local Government
With the increasing prominence of artificial intelligence and machine learning (AI/ML), numerous state governments are creating taskforces on AI to help determine their state’s AI strategy.
Gabriel Zighelboim
Cybersecurity, Federal Government, Market Intelligence
Defending against cyberattacks is an ongoing battle for the Air Force, Army, and Navy, and requires strategic maneuvering and intelligent solutions. An integral part of these solutions has been the collaboration and technical support from the defense industrial base (DIB). Recently, the principal cyber advisors from each branch announced their challenges and priorities geared toward addressing cyber needs.
Toan Le
Cybersecurity, Federal Government, Market Intelligence
Defending against cyberattacks is an ongoing battle for the Air Force, Army, and Navy, and requires strategic maneuvering and intelligent solutions. An integral part of these solutions has been the collaboration and technical support from the defense industrial base (DIB). Recently, the principal cyber advisors from each branch announced their challenges and priorities geared toward addressing cyber needs.
Toan Le
FAA, Federal Government, Market Intelligence
Given the numerous commercial airline safety incidents in the news within the past few months, it should be no surprise that the Federal Aviation Administration (FAA) and government legislators have taken an interest in improving the safety of US airspace. The FAA is looking into and implementing new solutions to improve airspace safety, and government legislators are funding airspace safety initiatives.
Gabriel Zighelboim
Buildings, Business Applications, CAD General, Digital Design, Federal Government, Infrastructure, State & Local Government
Passed in 2021, the Bipartisan Infrastructure Deal, or Infrastructure Investment and Jobs Act, is a massive investment in America’s infrastructure that’s creating a wave of opportunities for AEC firms. With billions of dollars allocated for infrastructure projects, many firms have secured funding and are preparing for significant growth.
Darian Burks
Buildings, Business Applications, CAD General, Digital Design, Federal Government, Infrastructure, State & Local Government
Passed in 2021, the Bipartisan Infrastructure Deal, or Infrastructure Investment and Jobs Act, is a massive investment in America’s infrastructure that’s creating a wave of opportunities for AEC firms. With billions of dollars allocated for infrastructure projects, many firms have secured funding and are preparing for significant growth.
Darian Burks
Federal Fiscal Year End, Federal Government, Market Intelligence
You read that title correctly; here we are near the end of another federal fiscal year. If you’re thinking it feels like Congress just passed the fiscal year 2024 (FY24) budget, you’re correct. Half of FY24 was spent in a state of continuing resolutions, with the passage of a final budget a whopping six months into the year, in March 2024. Federal agencies have had effectively half the time they would be allotted in an ideal fiscal year timeframe to spend less, the same, or in some cases more money.
Susanna Patten
Federal Government, Market Intelligence, Technology
In a contest this year of “Most Popular IT Market Trends” it’s highly likely artificial intelligence (AI) would win first place. Federal agencies have released troves of related guidance in the past year, including an executive order, Office of Management and Budget (OMB) memos, National Institute of Standards and Technology (NIST) protocols, and the Department of Defense’ (DoD) AI Strategy. So much of the discussion around AI up until very recently though has been just that: discussion.
Susanna Patten
Cybersecurity, Market Intelligence, State & Local Government
The 2024 fiscal year-end is coming to a close for 46 states, which means that it’s time to put on those running shoes and take advantage of any last minute, end-of-year opportunities. State, local and education (SLED) organizations are already game planning where to funnel resources and dollars in next year’s budget, highlighting the top priorities and challenges that will shape future downstream requirements.Key points to keep in mind:
Yvonne Maffia
Cybersecurity, Market Intelligence, State & Local Government
The 2024 fiscal year-end is coming to a close for 46 states, which means that it’s time to put on those running shoes and take advantage of any last minute, end-of-year opportunities. State, local and education (SLED) organizations are already game planning where to funnel resources and dollars in next year’s budget, highlighting the top priorities and challenges that will shape future downstream requirements.Key points to keep in mind:
Yvonne Maffia
Cybersecurity, Federal Government, Infrastructure, Market Intelligence
Recently the Office of the Director of National Intelligence (ODNI) released a roadmap entitled Vision for the IC Information Environment to outline a vision to protect the nation from adversaries and maintain a “strategic advantage" over those intending to harm its information infrastructure. The roadmap contains recommendations from a collaboration of more than one hundred technical leaders from the intelligence community (IC).
Toan Le
Cybersecurity, Federal Government, Infrastructure, Market Intelligence
Recently the Office of the Director of National Intelligence (ODNI) released a roadmap entitled Vision for the IC Information Environment to outline a vision to protect the nation from adversaries and maintain a “strategic advantage" over those intending to harm its information infrastructure. The roadmap contains recommendations from a collaboration of more than one hundred technical leaders from the intelligence community (IC).
Toan Le
Market Intelligence, State & Local Government, Technology
The Department of Justice (DOJ) recently released its Final Rule on Title II of the Americans with Disabilities Act (ADA). In doing so, they created numerous new requirements state and local governments need to adhere to in designing their digital offerings including adding video narration options, making websites compatible with assistive technologies and making web page labels descriptive.
Gabriel Zighelboim
Market Intelligence, State & Local Government, Technology, Transportation
Emerging technologies such as artificial intelligence (AI) and machine learning (ML) are all the rage as of late, and one sector where they can provide innumerable benefits deserves special attention – transportation.
Yvonne Maffia
Big Data & Analytics, Healthcare, Market Intelligence, State & Local Government
Maternal and child health (MCH) has become a top concern nationwide, particularly in disadvantaged, underserved and rural communities. According to the U.S. Department of Health and Human Services (HHS), the United States is experiencing a maternal health crisis nationwide, as it has one of the highest maternal mortality rates among high-income nations; increasing rates of complications from pregnancy or childbirth; and persistent disparities in such outcomes.
Yvonne Maffia
Cybersecurity, Market Intelligence, State & Local Government
The 2024 National Association of State Chief Information Officers (NASCIO) Midyear Conference took place in National Harbor, Maryland last week where state leaders shared insights into their top technology priorities, challenges, and lessons learned. Some of the key focus areas included artificial intelligence (AI) with emphasis on generative AI, data management, accessibility, and governance, cybersecurity and risk management, and modernization and the digital customer experience.Artificial Intelligence
Yvonne Maffia
Cybersecurity, Market Intelligence, State & Local Government
The 2024 National Association of State Chief Information Officers (NASCIO) Midyear Conference took place in National Harbor, Maryland last week where state leaders shared insights into their top technology priorities, challenges, and lessons learned. Some of the key focus areas included artificial intelligence (AI) with emphasis on generative AI, data management, accessibility, and governance, cybersecurity and risk management, and modernization and the digital customer experience.Artificial Intelligence
Yvonne Maffia
Application Lifecycle, Education, Market Intelligence, State & Local Government
According to data contained in a recent study from Pediatrics, the official scientific journal of the American Academy of Pediatrics, the number of school shootings in the United States has increased dramatically every year since the 2017-2018 school year. At the same time, school mass shootings have become increasingly deadly. Given this trend and the risk posed by security threats to students and faculty, school districts are desperate to find solutions to improve school security.
Gabriel Zighelboim
Big Data & Analytics, Market Intelligence, State & Local Government
Since 2023, we have seen an explosion in the number of state data privacy laws, demonstrating a clear focus amongst state governments in data privacy. In fact, according to the National Conference of State Legislatures, “at least 40 states and Puerto Rico introduced or considered at least 350 consumer privacy bills in 2023.” These data privacy laws create protections for a range of several types of data, from general consumer data protections to specific protections for health data and minor data.
Gabriel Zighelboim
Federal Fiscal Year End, Federal Government, Market Intelligence, Technology
If you have been confused lately seeing multiple March dates with some mention of the federal budget tied to them, you are not crazy. There are in fact multiple budgets floating out there in the ether: some finalized versions for certain agencies, others still awaiting that vote and presidential approval for fiscal year 2024 (FY24), as well as a wholly new request for funding from the President for FY25 priorities. We will catch you up as succinctly as possible, and if FY24 sounds too confusing, read on to hear what’s catching attention across IT for FY25.
Susanna Patten
Cybersecurity, Federal Government, Market Intelligence, State & Local Government
The 2024 United States presidential election is rapidly approaching, and state and local governments are focusing their efforts on bolstering election security and ensuring the proper safeguards are in place.
Yvonne Maffia
Cybersecurity, Federal Government, Market Intelligence, State & Local Government
The 2024 United States presidential election is rapidly approaching, and state and local governments are focusing their efforts on bolstering election security and ensuring the proper safeguards are in place.
Yvonne Maffia
Cybersecurity, Federal Government, Market Intelligence, State & Local Government
The 2024 United States presidential election is rapidly approaching, and state and local governments are focusing their efforts on bolstering election security and ensuring the proper safeguards are in place.
Yvonne Maffia
Cloud Computing, Cybersecurity, Market Intelligence
Originally passed in 2014, the Federal Information Technology Acquisition Reform Act (FITARA) was designed to improve the management of all-things-IT across federal agencies. It essentially realigned how the government purchases and updates its technology, with an aim at grading agencies based on their ability to adhere to and improve on the following categories:
Susanna Patten
Market Intelligence, State & Local Government, Technology
The start of a new year often brings uncertainties; but in 2024 one thing is for certain—artificial intelligence (AI) is top of mind nationwide and is expected to have a transformational impact on our society both now and in the future.
Yvonne Maffia
Big Data & Analytics, Market Intelligence, State & Local Government
The year 2024 is just around the corner, and with a new year typically comes new priorities. However, some things, like digital government, are here to stay. Improving the Citizen Experience will continue to be a top priority both now and, in the future, as the modern world emphasizes the importance of personalized services that provide agility, accountability, transparency, equity, efficiency, adaptability.
Prioritizing Citizen Experience
Yvonne Maffia
Federal Government, Market Intelligence, News, Technology
We’re still in the first quarter of the fiscal year and headed toward the holiday season. Historically, that predicates a slower pace across the federal sector, but not this year. This year, artificial intelligence (AI) is having a moment, and nearly everyone across the public sector, including the White House and The Office of Management and Budget (OMB), has something to say about it.
Susanna Patten
Federal Government, Market Intelligence, Technology
The era of heightened environmental awareness calls for decisive action, and the federal government has stepped up to lead this transformative journey. Three federal agencies have carved out significant roles in funding and facilitating environmental remediation technologies: the Department of Energy (DOE), the Environmental Protection Agency (EPA), and the Department of Defense (DoD).
Dawit Blackwell
Federal Government, Healthcare, Market Intelligence, Technology
Modernizing the defense healthcare system has never been more front and center for Defense Health Agency (DHA), the Department of Defense's (DOD) primary arm that manages all things healthcare for military service members and their beneficiaries. With acts of war and terrorism arising from overseas and the possibility of having our troops involved in future conflicts, patient healthcare and service preparedness are top priorities for the agency. So, the DHA is looking to work across federal agencies and industry to strengthen its healthcare systems.
Toan Le
Market Intelligence, State & Local Government, Technology
Numerous reports by various organizations, including the Government Accountability Office, have consistently found insufficiencies in state unemployment insurance programs. These insufficiencies were laid bare during the COVID-19 pandemic when increased need for such services, combined with an increase in fraudulent activity targeting unemployment insurance programs, overtaxed states’ unemployment insurance systems.
Gabriel Zighelboim
Cloud Computing, Cybersecurity, Education, Market Intelligence, State & Local Government, Technology
The annual EDUCAUSE conference highlighted higher education technology trends, goals, challenges, and how to identify a way ahead for higher education institutions to be successful in today’s modern world.
Yvonne Maffia
Cloud Computing, Cybersecurity, Education, Market Intelligence, State & Local Government, Technology
The annual EDUCAUSE conference highlighted higher education technology trends, goals, challenges, and how to identify a way ahead for higher education institutions to be successful in today’s modern world.
Yvonne Maffia
Cybersecurity, Education, Federal Government, Market Intelligence, Technology
Over the last few months, there have been several recent cybersecurity initiatives at the federal level, aimed at bridging gaps in K-12 cybersecurity policy and strategy.
Yvonne Maffia
Cybersecurity, Education, Federal Government, Market Intelligence, Technology
Over the last few months, there have been several recent cybersecurity initiatives at the federal level, aimed at bridging gaps in K-12 cybersecurity policy and strategy.
Yvonne Maffia
Federal Government, Market Intelligence
Ah yes, we meet again. The last week of the fiscal year: the air is cooler, pumpkin spice is in everything and the government might shut down. That is, if a deal isn’t reached by midnight on September 30th. This feels even more common, mostly because it is. And I don’t know about you, but the word “shutdown” might sound scary, apropos leading up to Halloween I suppose, but it doesn’t have to be. We’ll talk about what exactly a shutdown is, and more importantly, what it is not.
Susanna Patten
Cloud Computing, Cybersecurity, Market Intelligence
The Air Force hosts an annual summit known as Department of the Air Force Information Technology and Cyberpower (DAFITC) in Montgomery, Alabama, right next to Maxwell Air Force Base. It’s an opportunity for Guardians, Airmen, academics, and IT industry to come together to discuss pain point remedies and high-level plans and strategies. It is also an opportunity for branch heads to strike deals that lead to the adoption of modern and effective systems, meant to enable air superiority. Ms.
Kevin Shaker
Federal Government, Technology
TD SYNNEX Public Sector Receives a $342 Million U.S. Department of the Navy Enterprise Agreement
for Oracle Software and Services
Doing business with federal agencies has unique opportunities and challenges, particularly when it comes to procuring IT solutions.
On one hand, the U.S. federal government is the world’s largest buyer of IT products and services, so there’s a tremendous need. But acquiring those solutions can be arduous, and managing the intricacies of licensing and pricing can be an ongoing burden.
Darian Mian
Cybersecurity, Internet of Things, IT Infrastructure, Market Intelligence
IoT and Its Impact on Infrastructure and Governance
The Internet of Things (IoT) revolutionizes how governments, organizations, and citizens interact with the physical world. This wave of interconnected devices promises a transformative infrastructure and governmental operations shift. However as the reach of IoT grows, the implications — especially related to security — become even more profound.
Dawit Blackwell
Big Data & Analytics, Market Intelligence, State & Local Government
Data analytics played a pivotal role in state, local, and education (SLED) governments’ response to the COVID-19 pandemic, and the emphasis on the importance of data has only continued to magnify over the last couple of years. Data analytics and related technology tools provide a host of benefits ranging from real-time data analysis, increased transparency and accountability, streamlined citizen facing services, better decision making and savings in both costs and time.
Yvonne Maffia
Application Lifecycle, DevSecOps, Federal Government, State & Local Government
Technology is supposed to make our lives easier. So you know something’s wrong when nearly a third of federal government acquisition professionals surveyed say their agency’s acquisition technology makes the job more difficult.
Ben Allen
Application Lifecycle, DevSecOps, Federal Government, State & Local Government
Technology is supposed to make our lives easier. So you know something’s wrong when nearly a third of federal government acquisition professionals surveyed say their agency’s acquisition technology makes the job more difficult.
Ben Allen
Big Data & Analytics, Data and Analytics, Federal Government, Geospatial, Market Intelligence
As the demand for trustworthy visual data collection and advanced technologies to support strategic decision-making continues to rise, geospatial intelligence plays a vital role in delivering essential military and environmental insights to the intelligence community. Recently at the GEOINT Conference in St. Louis, leaders from several intelligence agencies shed light on the future of geospatial intelligence (GEOINT) and its relationship with emerging technologies.
Toan Le