Multimedia Smart Grid Security Media Business Career contact Critical infrastructure protection Ongoing monitoring of software vulnerabilities, collecting information about threats, monitoring compliance with the security policy and ensuring the handling of computer incidents are one of the most important factors determining the security of the country's critical infrastructure. What is critical infrastructure? The country's critical infrastructure are resources that are essential for the functioning of society and the economy. Its scope includes ICT systems supporting the production and distribution of electricity, transport, telecommunications, health protection, internal security and public administration. The complexity of software and ICT systems has increased tremendously over the past decade. Along with it, the risk of disclosure of vulnerabilities in the software and their use to take control of the system grew and continues to grow. Attacks on ICT systems are now an increasingly common type of armed conflict and terrorist activity. Therefore, the protection of critical infrastructure is one of the priorities of public administration, and the proper functioning of these systems and their credibility are key to ensuring the security of the country. Unique competences At Atende Software, since 2012, we have been developing the Critical Infrastructure ICT Security System (SBTI IK) intended for public administration and protection of critical infrastructure. We also provide penetration testing and training services. Our employees are actively looking for vulnerabilities in public and proprietary software. Comprehensive protection The software we design is tailored to the needs of the national public administration - we rely on the legal provisions for the protection of classified information and the National Critical Infrastructure Protection Program. We cooperate with CERT / CSIRT teams, we are also participants of the NASK N6 program and the OVAL consortium. Compliance with standards The software we develop is compliant with the SCAP (Security Content Automation Protocol) group of standards. SCAP is a set of specifications describing data formats and nomenclature used in the exchange of information on security policies, vulnerabilities and configuration of ICT systems. SCAP and RFC standards OVAL (Open Vulnerability and Assessment Language) A standard that defines the data format for describing vulnerabilities and errors in software, testing their occurrence and prevention, and reporting on them. XCCDF (Extensible ConfigurationChecklist Description Format) A standard that specifies the manner of expressing system requirements (e.g. security policies) and reporting compliance assessment results. OCIL (Open Checklist Interactive Language) Standard opisu kwestionariuszy, służących do manualnego weryfikowania poziomu bezpieczeństwa, w oparciu o wywiad z administratorem. IODEF (Incident Object Description Exchange Format) Standard pozwalający na wymianę informacji o incydentach komputerowych pomiędzy zespołami CERT/CSIRT. CVSS (Common Vulnerability Scoring System) Standard definiujący zasady punktowej oceny ważności zagrożeń wynikających z podatności sprzętu i oprogramowania. CVE (Common Vulnerabilities and Exposures) Słownik identyfikatorów podatności związanych z wykorzystaniem konkretnych słabości oprogramowania. CCE (Common Configuration Enumeration) Słownik zmiennych konfiguracyjnych, mających wpływ na bezpieczeństwo systemu. CPE (Common Platform Enumeration) Słownik identyfikatorów platform sprzętowych i programowych. Atende Software Sp. z o.o. Siedziba główna ul. Ostrobramska 86 04-163 Warsaw NIP: 113-268-73-65 phone: +48 22 255 11 00 fax: +48 22 255 15 50 email: info@atendesoftware.pl Copyright 2014 Atende Software Sp. z o. o., Atende Group in accordance with the current browser settings. You can change at any time.