OpenPMF 4.0 offers a comprehensive Zero Trust platform that makes access control effective and manageable through automation and intelligence. It helps manage and enforce fine-grained Zero Trust access control policies across complex IT\/OT environments.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
What<\/h2><\/div>OpenPMF\u2122 makes Zero Trust policies effective and manageable, restricting information flows only to what is authorized. Its award-winning “security policy automation” allows intuitive policy creation, automatically generating detailed technical rules by analyzing organizational and technical data. OpenPMF supports modern access controls, including Zero Trust Architecture (ZTA), DevSecOps, and Attribute-Based Access Control (ABAC).<\/p>\n<\/div><\/div><\/div>
- <\/i><\/span>\n
Policy Management<\/strong>: Create intuitive policies using natural language and graphical editors. These policies are captured in generic terms, reducing the need for frequent updates.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Automation:<\/strong> Automatically generates detailed technical rules by analyzing IT\/OT\/IoT\/IIoT\/Cloud environments. It integrates data from user\/device identities, application configurations, and network traffic patterns.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Enforcement:<\/strong> Enforces low-level policies via its infrastructure and integrates with third-party products through customizable exporters.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Monitoring & Compliance:<\/strong> Monitors security continuously and generates compliance documentation automatically.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Testing & Scalability:<\/strong> Allows policy testing before deployment and scales efficiently with evolving IT landscapes.<\/p>\n<\/div><\/li><\/ul><\/div><\/div><\/lite-youtube><\/div><\/div><\/div><\/div><\/div><\/div><\/div>Why<\/h2><\/div><\/div><\/div><\/lite-youtube><\/div><\/div><\/div><\/div>- <\/i><\/span>\n
Cost Savings:<\/strong> Significant maintenance cost reduction due to the automation and efficient management of security policies.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Adaptability:<\/strong> Handle complex and evolving IT\/OT landscapes in a manageable, robust and scalable way.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Zero Trust:<\/strong> Make technical access control manageable in Zero Trust environments<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Manageable policies:<\/strong> Manage policies in generic, intuitive “umbrella” terms as a single source of truth.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Flexible integrations:<\/strong> Use customizable importers to ease policy automation by importing existing context.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Automation:<\/strong> Generate low-level technical rules\/configurations enforced via our enforcement infrastructure and third-party products.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Compliance documentation:<\/strong> automatically generate compliance documentation.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Testing:<\/strong> Formally test policies before deployment<\/p>\n<\/div><\/li>- <\/i><\/span>\n
Monitoring:<\/strong> Monitor access enforcement<\/p>\n<\/div><\/li><\/ul><\/div><\/div><\/div><\/div><\/div>How<\/h2><\/div><\/div><\/div><\/lite-youtube><\/div><\/div><\/div><\/div>OpenPMF captures policies in generic terms rather than specific technical rules, reducing the need for frequent updates. For example, in dynamic IoT\/IIoT environments, it automatically generates security enforcement rules by analyzing these generic policies alongside changes in applications and their interactions. This method ensures policies remain manageable in large, evolving IT\/OT landscapes, leading to significant maintenance cost savings. OpenPMF\u2019s patented technology makes policy management both efficient and adaptable. In its most basic form, OpenPMF’s policy automation steps involve importing, authoring, and generating:<\/p>\n<\/div><\/div><\/div>
- <\/i><\/span>\n
1. Import:<\/strong> Import information about your organization, including systems\/applications, networks, data flows, users and alerts. And Import your existing technical policies as a baseline, for example access control configurations.<\/p>\n<\/div><\/li>- <\/i><\/span>\n
2. Author:<\/strong> Author security policies that are intuitive, generic, rich and easy customizable. Policies are technology-neutral, allowing for easy application to many technologies<\/p>\n<\/div><\/li>- <\/i><\/span>\n
3. Generate:<\/strong> Generate technical enforcement rules & configurations for example for access control automatically. OpenPMF\u2019s own enforcement infrastructure supports many technologies out-of-the-box, and other technologies on demand. OpenPMF comes with its own enforcement infrastructure, which includes\u00a0local software agents.<\/p>\n<\/div><\/li><\/ul><\/div><\/div>![](\"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2024\/05\/openpmfmds-1.png?resize=584%2C700&ssl=1\" "\\"openpmfmds\\"")
<\/span><\/div><\/div><\/div><\/div><\/div><\/div>OpenPMF’s policy automation workflow<\/strong><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div>![](\"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2024\/05\/openpmf-diagram-1000.gif?resize=541%2C337&ssl=1\" "\\"openpmf-diagram-1000\\"")
<\/span><\/div><\/div><\/div><\/i><\/i><\/span>1. Import, analyze and visualize<\/span><\/a><\/h4><\/div>\nOpenPMF uses your existing information to simplify policy automation.\u00a0Import information about your networks, applications, systems, and users at the click of a button.\u00a0Analyze and visualize the information, and select subsets you want to use for policy generation or policy testing.<\/p>\n
![](\"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2016\/08\/2b1.png?resize=450%2C429&ssl=1\")
<\/a><\/p>\n<\/div><\/div><\/div><\/i><\/i><\/span>2. Import existing policies<\/span><\/a><\/h4><\/div>\nImport existing security policies into OpenPMF as a basis for the policies you will manage in OpenPMF. For example, import from OASIS XACML compatible systems, or use OpenPMF\u2019s customizable importers to import other existing policies.<\/p>\n
![\"\"](\"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2016\/11\/import-policies.jpg?resize=450%2C341&ssl=1\")
<\/a><\/p>\n<\/div><\/div><\/div><\/i><\/i><\/span>3. Author policies<\/span><\/a><\/h4><\/div>\nAuthor policies in generic, intuitive, and rich concepts, using terms you choose.<\/p>\n
\n- Policy editor to author intuitive security policies<\/li>\n
- Most \u00a0policy building blocks user-configurable<\/li>\n
- Rapidly customizable\/flexible<\/li>\n
- Standards-based (Eclipse EMF)<\/li>\n
- Web browser based, SaaS-ready<\/li>\n<\/ul>\n
![\"\"](\"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2016\/12\/image13.png?resize=573%2C469&ssl=1\")
<\/a><\/p>\n<\/div><\/div><\/div><\/i><\/i><\/span>4. Generate enforcement <\/span><\/a><\/h4><\/div>\nGenerate enforcement of technical rules & configurations at the click of a button. OpenPMF generates \u201clow-level\u201d technical policy implementation from generic, intuitive expressive \u201chigh-level\u201d policies and other \u2013 ideally already existing \u2013 information sources.<\/p>\n
![\"\"](\"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2016\/11\/5x.jpg?resize=329%2C392&ssl=1\")
<\/a><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/i><\/i><\/span>5. Test policies and document for compliance<\/span><\/a><\/h4><\/div>\nTest Policies Using Formal Methods<\/h3>\n
Test policies\u00a0using formal methods. For example, you can test whether certain policies can or cannot occur.<\/p>\n
OpenPMF\u2122 makes Zero Trust policies effective and manageable, restricting information flows only to what is authorized. Its award-winning “security policy automation” allows intuitive policy creation, automatically generating detailed technical rules by analyzing organizational and technical data. OpenPMF supports modern access controls, including Zero Trust Architecture (ZTA), DevSecOps, and Attribute-Based Access Control (ABAC).<\/p>\n<\/div><\/div><\/div>
- <\/i><\/span>\n
Policy Management<\/strong>: Create intuitive policies using natural language and graphical editors. These policies are captured in generic terms, reducing the need for frequent updates.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nAutomation:<\/strong> Automatically generates detailed technical rules by analyzing IT\/OT\/IoT\/IIoT\/Cloud environments. It integrates data from user\/device identities, application configurations, and network traffic patterns.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nEnforcement:<\/strong> Enforces low-level policies via its infrastructure and integrates with third-party products through customizable exporters.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nMonitoring & Compliance:<\/strong> Monitors security continuously and generates compliance documentation automatically.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nTesting & Scalability:<\/strong> Allows policy testing before deployment and scales efficiently with evolving IT landscapes.<\/p>\n<\/div><\/li><\/ul><\/div><\/div>
<\/lite-youtube><\/div><\/div><\/div><\/div><\/div><\/div><\/div> Why<\/h2><\/div><\/div><\/div>
<\/lite-youtube><\/div><\/div><\/div><\/div> - <\/i><\/span>\n
Cost Savings:<\/strong> Significant maintenance cost reduction due to the automation and efficient management of security policies.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nAdaptability:<\/strong> Handle complex and evolving IT\/OT landscapes in a manageable, robust and scalable way.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nZero Trust:<\/strong> Make technical access control manageable in Zero Trust environments<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nManageable policies:<\/strong> Manage policies in generic, intuitive “umbrella” terms as a single source of truth.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nFlexible integrations:<\/strong> Use customizable importers to ease policy automation by importing existing context.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nAutomation:<\/strong> Generate low-level technical rules\/configurations enforced via our enforcement infrastructure and third-party products.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nCompliance documentation:<\/strong> automatically generate compliance documentation.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nTesting:<\/strong> Formally test policies before deployment<\/p>\n<\/div><\/li>
- <\/i><\/span>
\nMonitoring:<\/strong> Monitor access enforcement<\/p>\n<\/div><\/li><\/ul><\/div><\/div><\/div><\/div><\/div>
How<\/h2><\/div><\/div><\/div>
<\/lite-youtube><\/div><\/div><\/div><\/div> OpenPMF captures policies in generic terms rather than specific technical rules, reducing the need for frequent updates. For example, in dynamic IoT\/IIoT environments, it automatically generates security enforcement rules by analyzing these generic policies alongside changes in applications and their interactions. This method ensures policies remain manageable in large, evolving IT\/OT landscapes, leading to significant maintenance cost savings. OpenPMF\u2019s patented technology makes policy management both efficient and adaptable. In its most basic form, OpenPMF’s policy automation steps involve importing, authoring, and generating:<\/p>\n<\/div><\/div><\/div>
- <\/i><\/span>\n
1. Import:<\/strong> Import information about your organization, including systems\/applications, networks, data flows, users and alerts. And Import your existing technical policies as a baseline, for example access control configurations.<\/p>\n<\/div><\/li>
- <\/i><\/span>
\n2. Author:<\/strong> Author security policies that are intuitive, generic, rich and easy customizable. Policies are technology-neutral, allowing for easy application to many technologies<\/p>\n<\/div><\/li>
- <\/i><\/span>
\n3. Generate:<\/strong> Generate technical enforcement rules & configurations for example for access control automatically. OpenPMF\u2019s own enforcement infrastructure supports many technologies out-of-the-box, and other technologies on demand. OpenPMF comes with its own enforcement infrastructure, which includes\u00a0local software agents.<\/p>\n<\/div><\/li><\/ul><\/div><\/div>
<\/span><\/div><\/div><\/div><\/div><\/div><\/div>OpenPMF’s policy automation workflow<\/strong><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div>
<\/span><\/div><\/div><\/div><\/i><\/i><\/span>1. Import, analyze and visualize<\/span><\/a><\/h4><\/div>
\nOpenPMF uses your existing information to simplify policy automation.\u00a0Import information about your networks, applications, systems, and users at the click of a button.\u00a0Analyze and visualize the information, and select subsets you want to use for policy generation or policy testing.<\/p>\n
<\/a><\/p>\n<\/div><\/div><\/div><\/i><\/i><\/span>2. Import existing policies<\/span><\/a><\/h4><\/div>
\nImport existing security policies into OpenPMF as a basis for the policies you will manage in OpenPMF. For example, import from OASIS XACML compatible systems, or use OpenPMF\u2019s customizable importers to import other existing policies.<\/p>\n
<\/a><\/p>\n<\/div><\/div><\/div><\/i><\/i><\/span>3. Author policies<\/span><\/a><\/h4><\/div>
\nAuthor policies in generic, intuitive, and rich concepts, using terms you choose.<\/p>\n
- \n
- Policy editor to author intuitive security policies<\/li>\n
- Most \u00a0policy building blocks user-configurable<\/li>\n
- Rapidly customizable\/flexible<\/li>\n
- Standards-based (Eclipse EMF)<\/li>\n
- Web browser based, SaaS-ready<\/li>\n<\/ul>\n<\/a><\/p>\n<\/div><\/div><\/div>
<\/i><\/i><\/span>4. Generate enforcement <\/span><\/a><\/h4><\/div>
\nGenerate enforcement of technical rules & configurations at the click of a button. OpenPMF generates \u201clow-level\u201d technical policy implementation from generic, intuitive expressive \u201chigh-level\u201d policies and other \u2013 ideally already existing \u2013 information sources.<\/p>\n
<\/a><\/p>\n<\/div><\/div><\/div><\/div><\/div><\/i><\/i><\/span>5. Test policies and document for compliance<\/span><\/a><\/h4><\/div>
\nTest Policies Using Formal Methods<\/h3>\n
Test policies\u00a0using formal methods. For example, you can test whether certain policies can or cannot occur.<\/p>\n
- <\/i><\/span>
- <\/i><\/span>
- <\/i><\/span>
![\"\"](\"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2016\/05\/image34-1024x606.png?resize=1024%2C606&ssl=1\")
<\/a><\/p>\n![\"\"](\"https:\/\/i0.wp.com\/objectsecurity.com\/wp-content\/uploads\/2016\/05\/image17-1024x714.png?resize=1024%2C714&ssl=1\")
<\/a><\/p>\n<\/div><\/div><\/div>