hubblestack/hubble

HubbleStack isn't NIST SCAP Certified

thenoid opened this issue · 4 comments

thenoid commented

Some certification frameworks require you to use a NIST certified tool for auditing, saddly hubblestack is not on the list: https://csrc.nist.gov/Projects/scap-validation-program/Validated-Products-and-Modules

We love the Hubble, but are now faced with implementing "something listed" to meet our certification.

Is there any roadmap for getting certified? or suggestions?

basepi commented

Interesting! I'll have to put aside some time to check out the validation requirements. We definitely want to be on that list.

  • 👍1
thenoid commented

Out of curiosity, how'd the research go?

basepi commented

I have this in my jira backlog but haven't had a chance to look into it yet... >.<