Support Site

OT

Automating Baseline Configuration

by

What is Baseline Configuration Management (BCM)? The devices comprising an IT or OT environment store all kinds of configuration information, from functional settings to software versions to various other records and files. Most companies devise a configuration policy which defines how assets or devices should be configured and how configuration changes should occur. However, in many cases, the companies do not have the tools needed to confirm that devices are conforming to the policy.

This is where BCM comes in. The baseline configuration is a snapshot of the configuration settings at a specific point in time. The configuration settings defined as the “most secure” state of an asset can then be used as a baseline for comparison. Baseline Configuration Management involves periodically retrieving the configuration of the asset and comparing it to the baseline.

Not managing the baseline represents a significant risk to the business. The best way to understand the importance of BCM is to recognize that any device that does not have the proper configuration has a security vulnerability that can be exploited.

Unfortunately, many companies perform BCM as a manual activity, meaning that it is expensive, time-consuming, and prone to errors. At TDi Technologies, we solve this challenge with a device and platform agnostic approach to BCM that considerably simplifies the work involved. The ConsoleWorks solution completely automates this process, from retrieving the configuration, comparing against the baseline, alerting on changes, to identifying where changes have occurred.

View ConsoleWorks Configuration Monitoring Datasheet
View ConsoleWorks Configuration Monitoring for NERC CIP-010 Datasheet

Configuration Port in the Cybersecurity Strategy

by

Having a configuration port cybersecurity strategy for critical and non-critical cyber assets is important but often overlooked in the overall cybersecurity strategy. Virtually all electronic devices with communication capability have configuration ports, and these ports present an extremely high set of privileges that can be used to change almost anything on the target device. Failing to secure these ports results in a significant security risk.

Unfortunately, configuration port security is a commonly misunderstood area of cybersecurity. Security guidelines often provide broad statements such as “all ports should be either secured or disabled,” which obviously includes configuration ports. However, configuration ports should not be disabled as they are the default emergency access point for every IT and OT asset. Instead, they must be effectively secured.

View Configuration Monitoring Datasheet
View Configuration Monitoring NERC CIP 010 Datasheet

 

 

What is Your Burning IT Issue(s)?

by

Companies often purchase the ConsoleWorks Cybersecurity Operations Platform to solve specific IT  issues or burning issues within the organization.

We’ve compiled a list of the ‘Top 7 IT Burning Issues’ solved by ConsoleWorks.

Is your burning issue on our list?

  1. Service Disruptions Are Still Occurring – ConsoleWorks captures all changes, including those caused by human error, and provides a definitive record of what’s occurred, allowing you to proactively detect service threats and stop them before harm is done.
  2. The Business Expects Us to Continually Do More with Less –  ConsoleWorks dramatically simplifies and optimizes the daily work of admins, operators, and engineers.  Repetitive tasks are automated, streamlining daily work while increasing productivity and meeting business needs. ConsoleWorks reduces costs, lessens the risk of human error, and increases the device-management ratio by an average factor of 5x.
  3. Gaining Control Over Service Levels – ConsoleWorks provides real-time activity tracking and error detection in applications, so you can detect threats and manage SLAs down to each individual transaction.
  4. Meeting Demanding Government Requirements – ConsoleWorks provides a unified security and compliance solution, with powerful capabilities to proactively address issues and drive availability to new levels.
  5. Documenting Changes is Costly and Inaccuracies – Eliminate manual entry by people ‘after the fact.’ ConsoleWorks automatically records changes, down to the keystroke across the enterprise. Accurate records are created in real time, empowering oversight of all changes the instant they happen.
  6. Large Data Breaches – ConsoleWorks secures all IT and OT assets, identifies and responds to threats and documents all activity down to the keystroke.
  7. Security in The Cloud – ConsoleWorks can secure entire cloud instances, while automatically creating the comprehensive compliance records that prove exactly what changes have been made, and by whom.

ConsoleWorks – The Power of One Solution.

A unified security approach for consistent insight, reliability, and responsiveness to IT/OT cybersecurity and operational challenges facing today’s industries.

We can help

Reach out today, and we'll talk through how we might be able to help!

Contact us