U.S. National Institute of Standards and Technology (NIST) has awarded a FIPS 140-2 Level 1 certificate to the Asigra Cloud Backup platform.
Asigra Inc. is a cloud backup and recovery software provider. The company provides FIPS 140-2 certified agentless cloud backup and information security to government 
agencies and businesses. Its NIST recognition asserts that the platform exceeds regulatory compliance standards mandated to protect sensitive or classified data.
The Federal Information Processing Standard (FIPS) is an internationally recognized standard for cryptography products, developed by the United States Federal government for use by all non-military government agencies and by government contractors. Certification of Asigra’s Cloud Backup software platform encompasses the entire system for all data in flight and at rest.
The security requirements cover eleven areas related to the secure design of Asigra Cloud Backup, from physical and logical integrity of the software to system level functionality (such as user access control and key management). This certification provides one of the highest levels of assurance for security products, and it requires extensive third-party lab certification. Testing is performed for physical security, design quality, cryptographic best practices, fully specified state model, and independent cryptanalysis.
“End-to-end encryption and secure management of backup data is a priority for organizations as threats to sensitive information continue to grow,” says Charles Kolodgy, research director for IDC’s security products services. “Compliance, security, and storage professionals must ensure the confidentiality and integrity of employee and customer data by incorporating a comprehensive approach to backup data security into their overall risk reduction strategy.” He adds, “FIPS 140-2 certification by NIST demonstrates Asigra commitment to providing users with a high level of protection for critical backup data.”
Asigra’s cloud backup security features:
- FIPS 140-2 certification
- End-to-end encryption at all protected sites
- Encryption key safeguarding
- Password management and rotation
- Digital signature for every file and block of data
- Data destruction based on policy with certificate of destruction
“Organizations cannot risk data loss, especially where Personally Identifiable Information (PII) or classified data is involved,” says Asigra executive vice president Eran Farajun. “Achieving FIPS 140-2 certification for our cloud backup solution is additional validation that protecting information assets from the smallest organization to the largest distributed enterprise is a top priority for Asigra.”
