Armis Launches 'Critical Infrastructure Protection Program' with Three Months of Complimentary Service to Support SHIELDS UP Initiative

Energy,utilities,water supply,marine ports,and other critical infrastructure services can now gain full visibility of assets to improve security posture

PALO ALTO,Calif.,May 17,2022 -- Armis,the leading unified asset visibility and security platform,today announced the Critical Infrastructure Protection Program (CIPP) to help organizations supplying systemically important entities such as energy,water,and wastewater to pinpoint and fortify assets in need of urgent security improvements. Under this new program,critical infrastructure providers in the U.S. and NATO-aligned countries will have complimentary access to Armis for three months. As technologies converge,it is important now more than ever that public and private organizations collaborate to address the visibility gap and reduce this growing threat.

Geopolitical instability associated with the Russian invasion of Ukraine,along with ongoing U.S. and North Atlantic Treaty Organization (NATO) aid to Ukraine's defense efforts,increases the possibility of retaliatory cyberattacks against critical infrastructure in the U.S. and NATO-aligned countries. The program is complementary to Cybersecurity & Infrastructure Security Agency,or CISA,guidance which has been provided through the SHIELDS UP initiative to help organizations like those noted above prepare for,respond to,and mitigate the impact of cyberattacks. The potential attack surface of critical infrastructure across the U.S. alone includes:

55,000 substations on our electric grid

360 commercial maritime ports

2.6 million miles of pipeline

14,000 wastewater treatment plants serving 240 million Americans

"The ongoing modernization of critical infrastructure brings efficiencies and scalability to the lifeline services we rely on,such as electric power grids,commercial maritime ports,oil and gas pipelines,transportation services,and water treatment facilities. As these cyber-physical systems expand throughout our critical infrastructure,the attack surface and inherent risk are growing at an alarming rate," said Yevgeny Dibrov,CEO and Co-founder of Armis. "By joining the power of the Armis asset visibility and intelligence platform with leading security providers like Kroll,we are bringing the Critical Infrastructure Protection Program forward to collaborate and defend against future cyberattacks."

Announced in February as a response to Russia's invasion of Ukraine,CISA's SHIELDS UP program highlighted the risk of increased malicious cyber activity to the U.S. homeland. Armis also provides the following guidance:

Uncover critical unknowns – See the full inventory of connected wired and wireless assets

Understand risks – Prioritize vulnerability management with full device risk analysis,including vulnerability and behavioral analysis

Device connection study report – Discover and study potential attack vectors with device connectivity and interdependency mapping

Segmentation and boundary analysis – Rely on an actionable analysis to fortify boundaries and eliminate unauthorized connections

Software and hardware gap analysis – Understand hidden software and hardware gaps and risks

Alerts – Contain threats and exploits in near real time through integration with SIEM,SOAR,and/or XDR

Advanced reporting and analysis – Generate reports to satisfy compliance,regulatory,and auditing requirements

In conjunction with the introduction of the Critical Infrastructure Protection Program,Armis is partnering with Kroll,the leading provider of data,technology and insights related to risk,governance and growth. Kroll's frontline threat intelligence,generated from responding to more than 3,200 incidents every year,will be merged with Armis' OT and ICS telemetry to enable clients to build cyber resilience and confidently respond in the event of an incident. Organizations will be able to sign up for the program starting today,through June 17,2022.

"The cyber defense of critical infrastructure is of paramount importance. This requires comprehensive threat intelligence,technical visibility and continual detection and response to secure complex OT and ICS environments," said Jason Smolanoff,President of Cyber Risk at Kroll. "We must test controls,simulate attack scenarios,and conduct regular tabletop exercises to generate confidence that the security measures we take are effective. In collaborating with Armis we are bringing together their deep visibility with our extensive field experience,enabling clients to protect their most critical assets."

Services and Benefits of the Critical Infrastructure Protection Program

Three months of complimentary access includes:

Armis unified asset visibility intelligence and security platform,including the Armis IT and OT Policy Library

o Network Traffic Analysis for IT & OT networks

o Vulnerability,threat detection,and threat intelligence engines

o Armis Security Architect and Deployment Manager

Pre-built integrations for existing security platforms,such as scanners,firewalls,NACs,WLC,endpoint protection,and XDR solutions

Organizations participating in the program will receive:

Complete visibility into all connected Operational Technology (OT) and Information Technology (IT) assets

Rapid identification and easier management of security risks

Confident risk management of all connected OT and IT assets

Access to a customizable Cyber Risk Retainer from Kroll that includes preparedness,assessment,and response solutions

Gain complete visibility into OT and IT assets

The Armis platform performs continuous,non-invasive monitoring of every wired and wireless OT and IT asset in your environment. The platform:

Monitors devices communicating in the airspace via peer-to-peer protocols,which are invisible to traditional security products.

Protects your business from disruption by relying on the world's largest crowd-sourced,device behavior knowledgebase to detect threats with a high degree of accuracy.

Enables you to automatically disconnect or quarantine devices operating outside of "known-good" baselines.

Additional Resources

Join the conversation with Armis on LinkedIn,Twitter,and YouTube

Visit Armis.com to learn more about our agentless device security platform

Learn more or request access to Armis CIPP by emailing cipp@armis.com

Learn more about Armis CIPP and our approach to Operational Technology here

Read the Armis CIPP blog and Kroll's Cyber Risk blog for additional insights

If you're ready to get started,request a demo

About Armis

Armis is the leading unified asset visibility and security platform designed to address the new threat landscape that connected devices create. Fortune 1000 companies trust our real-time and continuous protection to see with full context all managed,unmanaged assets across IT,cloud,IoT devices,medical devices (IoMT),operational technology (OT),industrial control systems (ICS),and 5G. Armis provides passive and unparalleled cybersecurity asset management,risk management,and automated enforcement. Armis is a privately held company and headquartered in Palo Alto,California. Visit www.armis.com.

About Kroll

Kroll provides proprietary data,technology and insights to help our clients stay ahead of complex demands related to risk,governance and growth. Our solutions deliver a powerful competitive advantage,enabling faster,smarter and more sustainable decisions. With 5,000 experts around the world,we create value and impact for our clients and communities. To learn more,visit www.kroll.com.

Media Contacts:

Dillon Townsel

Sr. Director,Public & Media Relations

dillon@armis.com

512-571-3455