|
The list of Government organizations that are using or evaluating
Document Detective is sensitive. It is available upon request from
Government representatives.
The Deputy Director of the National Information Assurance Partnership (NIAP) has confirmed that there is no current
category in the
Common Criteria for Document Detective. She also indicated that a
Protection Profile was being developed for “redaction tools.” Since no
Common Criteria exists, there are no NIAP approved tools with the same
functionality as Document Detective. Because Document Detective does
not use encryption, it is a candidate for a Deferred Compliance
Authorization (DCA) in accordance with National Security
Telecommunications and Information Systems Security Policy (NSTISSP)
No. 11. The DCA requirements are covered in the NSTISSP-11 fact sheet.
SRS will assist you in obtaining a DCA from your
Designated Approval Authority (DAA).
The Defense Intelligence Agency's Security Engineering Branch tested
the Document Detective version 1.0 Beta in January 2005 along with
several other commercial programs. They concluded that, "No product
currently meets the specific requirements tailored for the DOD
community as well as Document Detective." They did have several
recommendations that were incorporated into the official version 1.0
release.
Document Detective was also the first product listed on the Defense
Security Service (DSS) Trusted Downloading Products List,
dated April 2005.
The Center for Army Lessons Learned (CALL) at Fort Leavenworth,
Kansas began using Document Detective in June 2005 under a pilot
program approved by US Army NETCOM. Dan Cindrich from CALL recently did
an interview
with Ann Bednarz at Network World about this successful pilot program.
|