Innovative COMPLIANCE FOCUSED IT Solutions for Your Business
RELEASING BLUE MERMAID in Q2 2024 - NIST 171 CMMC
April 23, 2024
CloudTrust is currently finishing up development of project Blue Mermaid. Due to its proprietary nature, we arent releasing full details yet but imagine deploying an entire NIST 171 CMMC compliant office with the push of a button.
Custom Software Development
Our team of software developers can create custom solutions to meet your unique business needs. Whether you need a new application, integration with existing systems, or a custom web solution, we can help you achieve your goals.
Mobile App Development
Our mobile app development services help you reach your customers on the go. We offer native and hybrid app development for iOS and Android platforms to help you stay connected with your customers wherever they are.
IT Consulting and Advisory Services
Our IT consulting and advisory services help you navigate the complex world of technology. Our team of experts can provide guidance on technology strategy, vendor selection, and project management to help you achieve your business goals.
Cybersecurity and Risk Management
Our cybersecurity and risk management services help you protect your business from cyber threats and data breaches. We offer a range of services, including risk assessments, security audits, and incident response planning to help you stay ahead of the latest threats.
NIST 800-171 Compliant Virtual Desktop on AWS WorkSpaces
About
The recent pandemic caused many ripples in our professional lives. No longer a luxury, work from home solutions are a necessity. A rise in state sponsored and privately led high profile attacks on commercial and government cyber infrastructure are also driving corporations and government entities alike to enforce strict compliance to standards like Nist 171, SOC, CMMC etc.
At CloudTrust, an AWS Partner, we've designed, installed and tested turnkey remote work solutions for those without multi-national enterprise budgets. Built with DOD IL4 HIPAA, SOC2, NIST 800-171 and CMMC level 5 compliant AWS Services to protect Controlled Unclassified Information (CUI) our systems are designed to deliver a flexible and fast Microsoft Windows or Mac remote work station solution to your remote work force.
Statement Of Work
The CloudTrust Inc USA mobile workforce solution includes Multi Factor Authentication (MFA), in transit and at rest encryption, tamper proof logging, separation of function, alarms, NIST style Systems Security Plans (SSP's), training policies and configuration management to meet the stringent requirements of the upcoming Cyber Security Maturity Model Certification (CMMC and NIST 800 171 Controlled Unclassified Information (CUI) requirements.
Work included in a typical 50-100 unit deployment scenario:
1. NIST 800-171 or SOC2 Gap Assessment conducted by our AICPA Certified Public Accountant and one of our AWS Certified engineers.
2. Discovery session(s) to fully understand your current IT and Business process environment.
3. Review of your current NIST policy and procedures program manual
4. Installation of NIST compliant multi AZ VPC with redundant gateways and subnets.
5. Registration of DNS domain through Route 53
6. Installation and programming of FreeRadius Multi Factor Authentication Server
7. Installation and set up of AWS Managed Directory Services (Managed Active Directory) with training for your AD Administrator
8. Installation and set up of AWS AD Connector
9. Installation and set up of a NIST compliant Windows Management Server and training on connection methods
10. Installation and set up of a NIST compliant file share server (file migration not included)
11. Installation and training on AWS WorkSpaces builds, maintenance and management. For the purposes of this offer, we set up an initial 5 workspaces with up to 5 different images, and AD accounts and then train the trainer.
12. Installation, configuration, tuning of required AWS Security Groups
13. Installation and configuration of AWS Config for NIST required Configuration Management
14. Installation and configuration of your AWS GovCloud IAM environment, password policies etc, and Multi Factor Authentication
15. Installation and configuration of VPC Flow Log for network traffic filtering and analysis
16. Installation and configuration of AWS Account API Activity monitoring and CloudWatch Alarms for real time monitoring
17. Admin user and training.
18. User demonstration and training.
19. Documented build specs and diagrams
20. AICPA Certified Public Accountant audited and signed letter of attestation to NIST 800-171 compliance.