Castleforce help companies with IT Security compliance and risk management by offering products and services to help enforce policies.

Assuria Log Manager CCTM Accreditation Achieved

Assuria Log Manager (ALM) securely collects and manages audit logs from across the enterprise, helping organisation, small SME’s or large enterprises, comply with regulations. The small footprint* ALM agents are available for Windows and Red Hat Linux platforms (plus many more please see out of scope section 2.2.4 for details). ALM can securely collect almost any logs from almost any source including Windows, Unix and Linux servers, databases, applications, network devices, firewalls, routers, access control systems and many more. Collection from new log sources can be added via agent plug-ins. Collected logs are stored in their original format in a standard file / folder structure with log data integrity ensured through digital signatures and cryptographic hashes.

ALM has a powerful log analysis engine and report generator which allows easy generation of customised reports and alerts of log events as well as a library of standard reports, such as those required for PCI-DSS or CESG GPG-13 compliance. Alerting options includes an opt-in email and other alerting options.

For more details on Assuria CESG CCTM accredited Log Manager

Assuria Auditor Server Security. Assured

Assuria Auditor provides automated Vulnerability Assessment and Configuration Assurance for servers and endpoints through a blend of Resident Agent and Remote Agentless scanning approaches.

• Server hardening
• Vulnerability Assessment
• Compliance Assessment
• Change detection
• Inventory Reporting

We have just launched a LinkedIn poll to see how IT staff currently harden Windows, Unix and Linux servers?

For further details on Assuria Auditor

PINsafe's single channel web-based solutions are ideal for protecting Web pages, Outlook Web Access (OWA) and SSL VPNs. It is simple to seamlessly integrate with these technologies and is an effective alternative or addition to vulnerable username and password authentication.

PINsafe provides a choice of TURing, PATtern or BUTton interfaces so help secure remote access with no ongoing cost for authentication. As a user's PIN is never entered the solution is immune to keyboard-logging based attacks. The images may employ character rotation and will use a range of fonts and backgrounds and even animation (PINsafe 3.6 onwards).  All to provide resistance to OCR attacks. The security strings can be made up of numbers, characters or even a mixture of the two.

For more details on Swivel PINsafe

DESlock PRO Features

• Full disk encryption - Fast transparent pre-boot security using FIPS validated 256 bit AES encryption.
• Removable media encryption - Policy driven removable media encryption using patented key sharing technology. Now includes DESlock+ Go, on-device software for off-system collaboration.
• Email encryption - Fast, transparent email encryption for Outlook users.
• File & folder encryption - Fast transparent encryption for an extra layer of security within the enterprise.
• Centralised management - Full control of licencing and software features, security policy and encryption keys.
• Assured security - DESlock+ is CESG CCTM accredited and FIPS 140-2 level 1 validated. 

For more details on DESlock Pro

Information Governance Toolkit Assessment for NHS

Castleforce Information Governance (IG) leadership focus on providing assistance to NHS providers, Commercial third parties and NHS partners in complying with the complex and rapid changing landscape of IG.

NHS Information Governance Toolkit V8 Online Submission

Join our open IT Security Group   

IT Security Awareness

Castleforce are partnered with AwareGo to offer organisations a different way to deliver IT Security Awareness messages to their employees.

The lack of user security awareness is the greatest threat to computer systems, but reaching people with security messages can often be difficult.

AwareGo provide video sketches that are about 5 minutes in length and provide a fun learning approach with a security message.   The AwareGo videos are an excellent way to reach a broad audience.

• Get your people interested in IT Security.
• IT Security awareness made simple and easy.