Compliance
NIST 800-53 SC-22 Fault Tolerant DNS Architecture
SC-22 asks for fault tolerant name resolution with internal and external role separation. Evidence, gaps and a plan.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
NIST 800-53 SC-21 Secure DNS for Recursive Resolvers
SC-21 requires resolvers to validate the origin and integrity of DNS answers. Learn what to configure and what to show.
Oct 18, 20264 min read
Compliance
NIST 800-53 SC-20 Secure DNS for Authoritative Servers
SC-20 asks authoritative name servers to return signed data and show the chain of trust. See what DNSSEC evidence looks like.
Oct 18, 20264 min read
Compliance
NIST 800-53 SC-2 Separating User and Admin Functions: What to Show
SC-2 separates user functionality from system management functionality. Evidence, common gaps and a practical way to implement it.
Oct 18, 20266 min read
Compliance
NIST 800-53 SC-19 Voice Over IP: Withdrawn, Still Worth Checking
SC-19 is withdrawn in Rev 5 and says VoIP is handled like any other technology. Here is what that means for your phone and meeting systems.
Oct 18, 20262 min read
Compliance
NIST 800-53 SC-18 Mobile Code: Controlling Code That Travels
SC-18 governs code that moves across networks and runs on another system, such as JavaScript. What to define, control and show.
Oct 18, 20266 min read
Compliance
NIST 800-53 SC-17 PKI Certificates: Evidence an Auditor Wants
SC-17 covers who issues your certificates and which trust anchors you accept. Evidence, common gaps and a practical process.
Oct 18, 20266 min read
Compliance
NIST 800-53 SC-16 Security and Privacy Attributes in Transit
SC-16 asks you to carry security and privacy attributes with data exchanged between systems. What that looks like and what proves it.
Oct 18, 20264 min read
Compliance
NIST 800-53 SC-15 Collaborative Computing: What to Show an Auditor
SC-15 stops remote activation of cameras, microphones and meeting tools and requires a visible indicator. Evidence, gaps and steps.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.