BeyondTrust boosts secure remote support for public sector compliance
BeyondTrust has announced its support for IT teams seeking to maintain security and compliance with Federal Information Processing Standards (FIPS) and Criminal Justice Information Services (CJIS) policies across both cloud and on-premises environments.
The rise in compliance expectations has led various agencies to reconsider their existing tools, resulting in a shift towards replacing non-compliant remote support software with BeyondTrust Remote Support. The aim is to uphold security standards and remain compliant as regulatory landscapes continue to evolve.
Compliance features
According to BeyondTrust, Remote Support is the only remote support product currently available with FIPS 140-2, Level 1 Validation. It is also among a limited number of offerings that can enable CJIS compliance. The solution is designed to provide secure and encrypted remote access without requiring the use of virtual private networks (VPNs), granting IT teams and service desks the ability to support systems and carry out repairs while retaining complete visibility and session control, alongside detailed auditing capabilities.
These features are intended to serve organisations subject to mandates such as FedRAMP, FISMA, DoDIN APL, Common Criteria, HIPAA, and HITECH healthcare regulations, as well as other private and public sector requirements where data protection, encryption, and robust auditing are necessary.
Public sector and authorisations
BeyondTrust Remote Support has received authorisation to operate (ATO) at the moderate impact level under the Federal Risk and Authorization Management Program (FedRAMP), underscoring the company's focus on protecting sensitive data. This authorisation supports public sector organisations in meeting mandates such as NIST Zero Trust (SP 800-207), while also enabling state and local governments, universities, and commercial clients to provide secure and compliant remote IT support services.
Customer perspective
"FIPS and CJIS compliance aren't just checkbox items, they're essential security and compliance requirements to protect mission capabilities and business functions amid growing cyber risk and scrutiny," said Sam Elliott, Senior Vice President of Products at BeyondTrust. "Many of our customers were using tools that failed to help them meet these requirements. With BeyondTrust Remote Support, they've found a secure, compliant-ready alternative that's built on day one to meet their mission and business needs."
The company notes that unlike other providers who have transferred responsibility for complex security and compliance requirements onto their customers, BeyondTrust continues to follow a customer-focused approach by offering a secure, compliance-ready platform tailored for regulated entities. This, BeyondTrust states, removes potential risks, additional costs, and operational burdens from clients.
Technical and deployment details
BeyondTrust Remote Support offers several technical features, including simplified deployment without the need for certificate management and a range of hosting options to accommodate data residency preferences. The solution supports full custom branding, granular role- and time-based access controls to enforce least-privilege principles, and complete session auditing.
The session encryption uses FIPS-validated cryptography, and the system architecture has been optimised for compliance with regulatory and security requirements. Additional service desk features and secure session management, including attended and unattended capabilities, are included. The platform supports cross-platform compatibility covering Windows, macOS, Linux, iOS, and Android devices.
From the customer perspective, Davis Hart, IT Division Manager - Customer Service for the City of Dothan, commented: "BeyondTrust makes it easy to make the case for prioritising security, especially for government organisations concerned with compliance and audit requirements. All these years after implementation, [using] BeyondTrust is still one of only a few CJIS-compliant options available."
The company has also published resources detailing its FedRAMP authorisations, FIPS 140-2 validation, and its approach to supporting CJIS compliance efforts, reflecting its stated commitment to helping customers meet evolving security and compliance standards in the IT support space.
