Microsoft Security Assessment Tool for Governments (MSATg)

Sun, 13 Jul 2008 05:10:20 GMT

The Microsoft Security Assessment Tool 3.75G (g for government version) is a revised version of the Microsoft Security Assessment Tool (MSAT) developed by Microsoft’s Trustworthy Computing Group. MSAT is comprehensive toolset to help security organizations within governments become more aware of the evolving security threat landscape that could impact their organizations.

The tool employs a holistic approach to measuring security postures by covering topics across people, process, and technology. Findings are coupled with prescriptive guidance and recommended mitigation efforts, including links to more information for additional industry guidance. These resources can help maintain awareness of specific tools and methods changing the security posture of the IT environment.

The new Microsoft Security Assessment Tool conducts an assessments focused on 4 primary areas:

• Infrastructure Security

• Application Security

• Security Operations

• People, Process, Policy

After completing each Assessment, a detailed report of the results is available to review.

The questions identified in the survey portion of the tool and the associated answers are derived from commonly accepted best practices around security, both general and specific. The questions and the recommendations that the tool offers are based on standards such as ISO 17799 and NIST-800.x, as well as recommendations and prescriptive guidance from Microsoft’s Trustworthy Computing Group and additional security resources valued in the industry.

The MSAT v3.75g is now be available to SCP Participants. The “g” version will remove the feature that allows for uploading and sharing the results with Microsoft and comparing those with other companies. This version will have the added ability to compile results on a user agency’s own servers and compare results between departments. Also as a part of this version, we provide instructions on developing a standard baseline and how this standard baseline can be distributed to other agencies to conduct an assessment comparison.

The MSAT 3.75G version is now available in the following languages:

Canadian French, French, German, Russian, Italian, Spanish (Latin America), Spanish (Spain), Portuguese (Portugal), Portuguese (Brazil), Chinese (Simple), Chinese (Mandarin), Japanese, Swedish, Norwegian, Danish, English (US), and English (UK.)

Microsoft Malaysia Security Advisor Page e·van·gel·ist: Tools

Microsoft Security Assessment Tool for Governments (MSATg)