3.1.3 Controls the flow of CUI in accordance with approved authorizations.
HaloCAD can block or grant access to selected CAD files based on authorization granted by Entra ID and MPIP.
3.3 Audit and Accountability (AU)
3.3.1 Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity.
With HaloCAD, MPIP audit logs are available for monitoring file access attempts and SIEM analysis can be performed on the HaloENGINE logs.
3.4 Configuration Management (CM)
3.4.2 Establish and enforce security configuration settings for information technology products employed in organizational systems.
HaloCAD’s Zero Trust protection posture for all systems that employ it.
3.5 Identification and Authentication (IA)
3.5.2 Authenticate (or verify) the identities of users, processes, or devices, as a prerequisite to allowing access to organizational systems.
HaloCAD’s Zero Trust protection and sensitivity labeling ensures CAD files are only accessible by authorized users.
3.6 Incident Response (IR)
3.6.1 Establish an operational incident-handling capability for organizational systems that includes preparation, detection, analysis, containment, recovery, and user response activities.
HaloCAD’s authentication and authorization events are audited within the sign-in logs, and any detected risks are audited in the Identity Protection logs.
3.8 Media Protection (MP)
3.8.1 Protect (i.e. physically control and securely store) system media containing CUI, both paper and digital.
HaloCAD digitally secures all CAD files that are classified as CUI from the point of origin - independently from storage level encryption methods.
3.9 Personnel Security (PS)
3.9.2 Ensure that organizational systems containing CUI are protected during and after personnel actions such as terminations and transfers.
Terminating or revoking system access to personnel will deny them access to CUI files protected by HaloCAD or HaloCORE.
3.13 System and Communication Protection (SCP)
3.13.16 Protect the confidentiality of CUI at rest.
HaloCAD protects CAD files that are classified as CUI both at rest and in use and with PLM transfers.
3.14 System and Information Integrity (SI)
3.14.7 Identify unauthorized use of organizational systems.
Unauthorized access attempts to CUI files protected by HaloCAD or HaloCORE can be captured and alerted on via SIEM.
.svg)
