The Federal Deposit and Insurance Corporation contributes to the stability of and public confidence in the nation's financial system by insuring deposits, examining and supervising financial institutions, and managing receiverships. With an insurance fund totaling more than $49 billion, FDIC insures more than $3 trillion of deposits, and directly examines and supervises over 5,000 financial institutions.
As a crucial bulwark for the nation's financial system, FDIC faces a myriad of unique security challenges. As a premier provider of Information Assurance services, Endeavor Systems, plays a major role in helping FDIC achieve their vital information security objectives. As part of this effort, Endeavor Systems is currently engaged in the design, implementation and support of FDIC's comprehensive security monitoring and assessment program. Our engineers are analyzing FDIC's security requirements, and constantly evaluating, recommending, and implementing new technology for improving our client's security infrastructure.
Rigorous Product Assessment and Security Architecture
Issue - FDIC was in need of a centralized Security Information Management (SIM) solution for consolidating system security information. They were overwhelmed with competing product choices, and required assistance assessing various options.
Action - Endeavor's consultants exhaustively analyzed the available solutions and came up with a shortlist of three final products. We subjected these potential solutions to a rigorous product assessment battery, including over 70 security test cases, before finally settling on the ArcSight Enterprise Security Manager (ESM). We prepared a comprehensive evaluation report for our client, and won approval this solution from the CIO's Architecture Review Board.
Results - After securing the Architecture Review Board's approval, our team of certified ArcSight Administrators set to work deploying the ArcSight system on behalf of FDIC. We designed the architecture, delivered the SOPs, and are forming the methodology for ongoing development of ArcSight ESM as new connectors and requirements are made available.