#USA #San Jose #AWS #Axiad #PKI

Axiad Secures Federal Authorization on AWS

Axiad, a prominent player in the identity and credential security field, has recently achieved FedRAMP® Moderate authorization on Amazon Web Services (AWS). This significant milestone provides federal agencies with a streamlined, cloud-oriented approach to modernizing their Public Key Infrastructure (PKI) systems and enhancing phishing-resistant identity mechanisms.

The Axiad Conductor platform, powered by AWS, offers a robust solution that allows agencies to efficiently issue and manage Derived PIV Credentials. It enables the transition to PKI-as-a-Service, modernizing outdated processes and extending PIV-level assurance to both mobile devices and various authenticators. The result is a consolidated approach to managing the lifecycle of certificates and credentials without the necessity for additional infrastructure deployment.

With the mandate for federal agencies to transform their aging PKI systems and implement phishing-resistant authentication across all platforms, many have found they lack the resources and risk tolerance to build such systems in-house. Axiad addresses this gap by offering a faster, lower-risk alternative that is hosted entirely on the cloud, thus alleviating the burden of operational overhead typically associated with managing on-premises systems.

Axiad Conductor is already proving invaluable in various high-profile identity security programs, supporting organizations like the Centers for Disease Control and Prevention (CDC), the U.S. Patent and Trademark Office, and the U.S. Department of Justice. The solution not only streamlines the deployment of secure identities but also significantly shortens the time frame for achieving compliance and operational readiness.

Simplifying Compliance and Risk Management

One of the most pivotal aspects of the Axiad Conductor solution is its capacity to tackle various compliance requirements seamlessly. The platform aids agencies in meeting essential guidelines laid out by regulatory bodies, including NIST's Special Publication 800-157 and FIPS 201-3, which focuses on Derived PIV Credentials and modern credential lifecycle management. Moreover, it supports compliance with OMB M-22-09 and Executive Order 14028, emphasizing the importance of phishing-resistant multi-factor authentication and Zero Trust principles.

Additionally, it aligns with the CISA Zero Trust Maturity Model, ensuring enhanced identity verification and device trust, while also adhering to FISMA and NIST SP 800-63-4 for centralized policy enforcement, auditing, and monitoring. This integrated approach not only mitigates the risks associated with identity verification but also solidifies the overall cybersecurity framework within agencies.

Future-Proofing Against Quantum Threats

Looking ahead, Axiad Conductor is also preparing agencies for the impending threats posed by emerging technologies such as quantum cryptography. The infrastructure is designed to support post-quantum cryptographic algorithms, enabling a transition to more sophisticated algorithms as they become established by NIST standards. This forward-thinking capability is crucial for securing sensitive federal data against evolving threats, thus allowing agencies to confidently embrace new technologies without the fear of obsolescence.

With over 15 years of experience in securing identities for federal, defense, and regulated sectors, Axiad is well-positioned to support organizations as they navigate the complexities of modern identity security. The Axiad Conductor solution is available to federal agencies via GSA MAS, NASA SEWP, and Carahsoft, and it is featured on the FedRAMP Marketplace.

In summary, Axiad’s recent achievements signify a leap forward in providing federal agencies with means to modernize their PKI systems efficiently. By leveraging cloud technology and addressing pressing security and compliance needs, Axiad is setting new standards in the realm of identity verification and credential management, marking an important evolution in public sector cybersecurity capabilities.