CybrIQ
  1. Home
  2. Use case
Use caseNDAA 889: finding prohibited equipment

Found on your network, where a form cannot look.

Compliance with equipment prohibitions usually rests on a supplier attestation, which describes what was shipped on the day it shipped. What is plugged in today is a separate question.

  1. 01
    Why attestation is not enough

    Equipment gets replaced under warranty, swapped by an installer or rebadged upstream, and the paperwork keeps describing the original purchase order through every one of those changes. Three years later, they differ.

  2. 02
    What changes

    The record describes what is electrically present now. Uncertain devices are marked uncertain. Passing one quietly as compliant is the failure that matters here.

  3. 03
    What we do not claim

    We do not certify compliance or give legal opinions. We produce the device record that a compliance decision is made against.

Which productsThe wire, then the paperwork

CrossScan and CrossTrust, usually in that order.

What is plugged inCrossScan

Names the equipment on every port, with a confidence figure.

 What the paperwork saysCrossTrust

Shows where your drawings and configurations contradict each other.

Bring one switch.

Bring read-only access to one switch that serves a sensitive area. In thirty minutes you see what is on it. Anything uncertain is marked.

Book a 30-minute working session Check what we refuse to claim