Jeff Simon Director of Service Solutions Tripwire

Tripwire, Inc., a leading global provider of risk-based security and compliance management solutions, and PAS, a leading provider of software for process safety, cyber security and asset reliability for the energy, power and process industries worldwide, has announced a technology partnership and integration. The partnership is part of the Tripwire NERC Alliance Network program that has been designed to foster collaboration on critical infrastructure compliance and security solutions that help companies efficiently and effectively achieve NERC CIP compliance.

The integration between the Tripwire NERC Solution Suite and PAS Integrity Software Suite will provide mutual energy customers with automation software that drastically reduces the time and resources required to collect audit evidence. The integration brings a consistent approach to the management and maintenance of secure configurations across a wide range of devices including ICS, SCADA, Microsoft Windows and Windows Servers.

“Today, because many organizations have two separate business processes for these different assets, tracking and compliance reporting is resource intensive and can be error prone,” said Jeff Simon, director of service solutions for Tripwire. “Our integration with the PAS Integrity Software Suite will make it possible for energy organizations to use a single, consistent workflow to assess and manage the secure configuration of industrial control systems and business assets.”

Energy organizations are required to gather, analyze, prioritize and document an overwhelming amount of vulnerability and network data in order to protect their most critical assets and meet compliance requirements. The integration of Tripwire’s NERC Solution Suite and PAS’ Integrity Software Suite provides customers with:

• A single process that enables continuous monitoring and rapidly captures detailed status information across a wide range of critical cyber assets, from computer systems and network devices to badge entry systems and SCADA devices.
• Audit-ready reports and dashboards conveniently grouped via a flexible and extensible classification system.
• Automated assessment and aggregation of security data alerts that assist in detecting potential security breaches or configuration modifications that affect compliance status.

“The combination of PAS and Tripwire technologies allows us to offer our customers a powerful solution,” said Mark Carrigan, vice president of technology at PAS. “Automating the collection of configuration information for all critical assets in energy organizations saves precious resources, improves compliance, reduces human error and, in addition, dramatically reduces cybersecurity risks.”

The integration of PAS’ Integrity Software Suite and Tripwire’s NERC Solutions Suite will be demonstrated at the 2014 PAS Technology Conference. The conference will take place May 19–21, 2014, at the Hilton Americas-Houston hotel in Houston, Texas.

About PAS
PAS is a leading provider of software solutions for process safety, cyber security, and asset reliability to the energy, process, and power industries worldwide.  PAS’ solutions include industrial control system cyber security, automation asset management, alarm management, high performance HMI, boundary management, and control loop performance optimization.  PAS’ solutions are installed in over 1,000 facilities worldwide with more than 30,000 users. For more information, visit www.pas.com.

About Tripwire

Tripwire is a leading global provider of risk-based security and compliance management solutions, enabling enterprises, government agencies and service providers to effectively connect security to their business. Tripwire provides the broadest set of foundational security controls including security configuration management, vulnerability management, file integrity monitoring, log and event management. Tripwire solutions deliver unprecedented visibility, business context and security business intelligence allowing extended enterprises to protect sensitive data from breaches, vulnerabilities, and threats.

Learn more at www.tripwire.com,