Rubrik Cloud Data Management Platform to Achieve Common Criteria EAL2+

Rubrik, Inc. announced that its offerings have been certified to meet the requirements of EAL2+ of the common criteria for IT security evaluation.

The company has built a portfolio of government certifications and accreditation across the hybrid cloud, including common criteria EAL2+, FIPS 140-2 level-2 validated self-encrypting drives and support for all major AWS and Azure government infrastructure clouds.

Common criteria is an internationally recognized standard that defines a framework for evaluating the security of IT products. US government organizations, international government entities from 27 different countries, and many global Fortune 500 corporations require common criteria certification to aid in the evaluation of IT products for their infrastructures and often require contractors to uphold the standard.

The certification requires developer testing, vulnerability analysis, product lifecycle management, process assessment, and independent testing based on detailed Target of Evaluation (TOE) specifications. The assessment determined that Rubrik appliances meet the requirements for EAL2+ of the common criteria for IT security evaluation.

The Rubrik Cloud Data Management platform is mission-built for IT modernization across federal, state, and local government agencies. The firm enables secure management of physical and virtualized data, across all locations-on-premises, at the edge, and in the cloud. It provides in-flight and at-rest encryption to allow government agencies to backup, replicate, and archive data while complying with rigid data protection policies regarding classified, confidential, or personally identifiable information (PII). It ensures data integrity by continuously validating data throughout its lifecycle, providing data immutability against cyber-attacks (ransomware) and resilience to failures. For high security standards, it offers the r528 appliance, which provides at-rest encryption using FIPS 140-2 Level 2 validated self-encrypting drives.

For government customers with a hybrid cloud strategy, Rubrik provides a support for all major government infrastructure offerings, including Azure GovCloud, AWS GovCloud and Commercial Cloud Services (C2S). It is an Advanced Tier Technology partner in the AWS Partner Network and a Global ISV Co-Seller in the Microsoft Partner Network.

“We are pleased that Rubrik has received this critical certification, demonstrating that our solution has stood up against extremely stringent testing,” said Steve Alfieris, VP and GM of federal government, Rubrik. “With Rubrik, government agencies can ensure their data is secure and compliant throughout its lifecycle. Since the platform has been designed to lower the TCO within government environments, customers typically achieve cost reductions of 20-50% over the first three to five years of implementation.“

“Rubrik provides comprehensive IT security solutions within their product line to meet Federal standards. I congratulate them on this new certification,” said Victor Marquez, CEO, Marq Solutions, LLC. “Their hardware and software FIPS 140-2 certified encryption solution and secured Brik Operating System (BOS) leave no doubts in the mind of security-conscious organizations that their data is secure.“

“We appreciated the opportunity to work with Rubrik on performing Common Criteria evaluation of Rubrik Cloud Data Management,” said Eugene Polulyakh, GM, Advanced Data Security, LLC accredited FIPS and common criteria testing laboratory located in San Jose, CA. “During the Common Criteria evaluation process, Advanced Data Security performed security architecture analysis, vulnerability analysis, and penetration testing of the product. Rubrik products are unique because they help companies to manage their recovery and backup in physical, virtual and remote environments as well as manage their data in public and private clouds. The Common Criteria certification of Rubrik Cloud Data Management is a major achievement that demonstrates Rubrik’s commitment to offer secure and dependable products.“

Resources:

Military-Grade Data Security
Case study Commander, Navy Installations Command Simplifies and Automates Data Management
Rubrik Data Management for Government