Rapid7 says InsightGovCloud supports CISA BOD 22-01 compliance
Original title: How Rapid7 InsightGovCloud Supports BOD 22-01 Compliance
The FedRAMP-authorized suite advertises KEV alerts, asset discovery and CyberScope XML exports for agencies and contractors.
Rapid7 published a product explainer on how InsightGovCloud, its FedRAMP-authorized suite, maps to CISA Binding Operational Directive 22-01. The post says InsightVM and InsightCloudSec inventory assets, ingest the CISA known-exploited-vulnerability catalog and help prioritize remediation. It also describes CyberScope XML exports and an audit trail for reporting. The piece is vendor marketing and does not disclose a new vulnerability or incident.
Unconfirmed: Coverage and compliance claims come from Rapid7 and are not independently verified in the post.
- InsightVM polls Active Directory, AWS and Azure through Discovery Connections.
- Rapid7 claims 90 percent coverage of CISA KEV host vulnerabilities on premises and in the cloud.
- The suite can export CyberScope XML for Office of Management and Budget submissions.
- InsightGovCloud is described as deployed in a FedRAMP Authorized environment.
From the original article
2 min read at rapid7.comAn introduction to CISA’s BOD 22-01 Issued nearly four years ago, the U. S. Cybersecurity and Infrastructure Security Agency (CISA) Binding Operational Directive 22-01 (BOD 22-01) has been adopted across both public and private sector organizations as a framework to ensure timely remediation of vulnerabilities being exploited by adversaries.
By Rapid7 · rapid7.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.