Case Study: Cisco Umbrella achieves FedRAMP compliance in weeks with Anchore Enterprise

Cisco Umbrella achieves FedRAMP compliance in weeks with Anchore

Cisco Umbrella, a cloud security platform from Cisco, faced the challenge of achieving and maintaining stringent FedRAMP, FIPS, STIG, and EO 14028 compliance for its government-focused services on AWS GovCloud. They needed to meet six specific FedRAMP vulnerability scanning requirements for containers and secure their software supply chain against potential vulnerabilities from third-party dependencies. To solve this, they turned to the vendor Anchore and its product, Anchore Enterprise.

Anchore implemented its on-premise Anchore Enterprise platform, which provided a distributed container scanner, an automated policy engine with built-in FedRAMP compliance packs, and turnkey SBOM management. This solution enabled Cisco Umbrella to achieve all required compliance standards in just weeks instead of months. The results included a significantly reduced implementation time, an improved developer experience by integrating security directly into existing workflows, and future-proofing against anticipated compliance requirements.

Cisco Umbrella