The latest version of verinice is now available. With V 1.10 users have access to the IT Baseline Protection Catalogs in English and can use the new edition of the VDA IS-Assessment in version 2.x. Exclusive new features for the server version verinice.PRO are single-sign-on with Active Directory and importing users from the AD into the IT Baseline view as well as the optimization of the task view.

Important note for the update: Due to the necessary data migration, thefirst launch of verinice…

From installing and working with verinice to importing OpenVAS scans: 16 screencasts, produced by Nils Ulltveit-Moe, guide users through the OpenSource information security management system (ISMS). They're all available via YouTube.

The tutorials demonstrate, for example, how to add threats and vulnerabilities, how to create risk scenarios and risk assessment reports or how to add documents and design workflows. They also introduce the Spanish open standard MAGERIT. By this the course utilises…

March 24th - 26th 2015 marks the date of WHD.global (World Hosting Days) - verinice will be present as well. The SerNet GmbH, home of verinice, will be hosting a verinice booth. You're invited to visit us at D12 and dive into the the meet-up of the hosting and internet world at Europa-Park Rust with us. 

The SerNet team is excited to present and talk about verinice as well as the according topics IT-Security, ISMS, ISO 27001 and BSI Baseline Protection. On Thursday (March 26th) SerNet CEO Dr.…

As of now verinice 1.9 is available for download. The update at a glance:

• VDA ISA Standard 2.0
  In verinice 1.9 the new IS-assessment Catalog of the Association of the Automotive Industry is implemented. The standard has been thoroughly revised and adjusted to the new requirements of the updated ISO 27001: 2013.
  Due to a special unify function existing levels of maturity can be transferred to the new chapter numbering. Existing assessment results can be reused, and users do not have to start…

verinice 1.8 has been released. The new version is ready to be downloaded here.

verinice 1.8 delivers a couple of new features to make the management of your ISMS even more friendly and efficient:

• Generic workflow
  When the deadline for a task has passed, the task stays with the person responsible. The initiator of the task receives a notification email. The asignee can request to postpone the deadline and the initiator can accept or deny this request.
• Deleting objects during import
  When…

verinice will be present at the IT-security expo it-sa from October 7th to 9th 2014 in Nuremberg. Meet up with the team in hall 12.0 / 12.0-339 and get all the news about verinice as well as the future roadmap. 

You're planning to attend? We'll hand out codes for etickets - just send uns an email to itsa@remove-this.sernet.de. It can be redeemed at www.it-sa.de/voucher from August 26th onwards.  

From now on verinice is available in version 1.7.0. Main changes are: 

ISO 27001:2013 / IT Baseline-Catalog, 13th Addition

The standards ISO / IEC 27001:2013 and the IT-Baseline Catalog with its 13th supplemental set are available in the most recent versions.

Direct import for file structures

verinice can now import entire subtrees from the file system into the database in a single action. Folder structures are also listed, files create appropriate objects and are imported simultaneously as…

The new verinice Risk Catalog is available as of now. ISO released the updated version of ISO/IEC 27001:2013 in October 2013 with numerous changes - all of which are incorporated in this new catalog. Whether verinice novice or expert: The up-to-date Risk Catalog will turn out to be a real time saver. 

The new version of this verinice risk cataloge contains all 14 control clauses, 35 security categories and 114 controls of the standard. Furthermore it contains 109 generic risk scenarios, 47…

"Heartbleed" - a severe vulnerability in the OpenSSL encryption software - currently worries the IT scene. At SerNet and in the verinice team we looked into the matter intensively and found corresponding solutions. We will keep you updated about all possible developments. 

Information for verinice customers:

• The verinice client is not affected.
• Users of the appliances should draw or update the OpenSSL package , the update is already available.
• Heartbleed has also affected the verinice…

A case study from Greenbone Networks GmbH shows how to make automated vulnerability management possible in combination with verinice: LEONI AG, automotive supplier headquartered in Nuremberg, relies on a combination of Greenbone Security Manager (GSM) and verinice.PRO 

The case study "Vulnerability Management" is available as PDF at Greenbone.

As it stands out, LEONI was able to increase the elimination of vulnerabilities significantly as well as raise the efficiency of globally distributed IT…