Consensus Audit Guidelines (CAG) helps you prioritize your organization's most critical IT security concerns
Going one step further than FISMA, the SANS Institute's Consensus Audit Guidelines (CAG) is a critical part of U.S. federal agency security. Instead of focusing just on regular audits and rule fulfillment, Consensus Audit Guidelines (CAG) provides agencies with the tools they need to strategically prioritize the day-to-day IT security concerns they encounter. SANS's Top 20, otherwise known as the twenty Critical Security Controls (CSC), are mapped to FISMA controls, so it is standardized under SCAP, and is considered a key component of any robust federal agency security program.
Use Nexpose and Metasploit to check your physical and virtual assets and make sure they comply with the consensus audit guidelines (CAG) CSCs. Find vulnerabilities and malware exposure with Nexpose. Enforce proper configurations and boundary defenses with penetration tests using Metasploit.
Free Product Downloads:Learn the requirements and steps in becoming CAG compliant
Learn more about Nexpose for vulnerability management
