Log inStart for free
Start for freeLog in

Security & Compliance

JOLDISK uses NIST CMVP-validated cryptographic modules (FIPS 140) and is aligned with CMMC, NIST SP 800-171 security controls, and the Zero Trust Data Pillar.

01

NIST CMVP-validated cryptographic modules (FIPS 140)

Cryptographic operations for files and communications are performed in NIST CMVP-validated cryptographic modules (FIPS 140). Unvalidated cryptography is not used.

  • Encryption of stored data
  • Encryption in transit
02

Aligned with CMMC and NIST SP 800-171

Supports CUI Registry-based categories and classification banners on printouts, and helps meet 18 NIST SP 800-171 security requirements.

Control family
Requirements
JOLDISK features
ACAccess Control
3.1.1, 3.1.2, 3.1.3, 3.1.5, 3.1.10
Access limited by level, compartment, and distribution control; permissions based on the org chart; automatic screen lock after inactivity
AUAudit and Accountability
3.3.1, 3.3.2
Data access history
IAIdentification and Authentication
3.5.1, 3.5.2
JOLDISK account login, device registration
MPMedia Protection
3.8.4, 3.8.7, 3.8.8
Removable media control, classification banners and CUI markings on printouts
RARisk Assessment
3.11.1
Data security posture management
SCSystem and Communications Protection
3.13.8, 3.13.11, 3.13.16
Protection of data in transit and at rest with NIST CMVP-validated cryptographic modules
SISystem and Information Integrity
3.14.6, 3.14.7
Review of export attempts and block history

JOLDISK helps meet security controls and does not replace certification (assessment).

03

Zero Trust Data Pillar

Supports the Data Pillar of Zero Trust architecture through data-centric security. Protection stays with a file even when it leaves the secure area, and only authorized users can open it.

Data
Pillar
04

CUI classification and marking

Classify Controlled Unclassified Information (CUI) with categories based on the US CUI Registry, and mark documents and printouts.

  • CUI Registry-based categories
  • Header, footer, and portion markings in Word documents
  • Classification banners on printouts
05

Device and program protection

Protected data can be opened only by authenticated users on registered devices, and admins can remotely delete protected data on a device.

  • Opening only on registered devices
  • Remote deletion of device data
  • Program integrity protection
  • Automatic updates
06

Defense and defense-industry security expertise

Team credentials

  • CMMC RPA, CMMC RP
  • CISSP
  • ISO 27001, 27701, 42001, 9001 Auditor

Awards

  • DAPA Minister's Commendation (defense technology protection)
  • NIS Director's Commendation (national counterintelligence)
  • Minister of Science and ICT Commendation
  • Defense Security Institute Director's Commendation (outstanding paper)
  • 2021 Defense Counterintelligence Commander's Commendation
  • 2020 Defense Counterintelligence School Commandant's Commendation
  • 2002~2005 Deputy Prime Minister and Minister of Education (4 consecutive years), Korea Computer Prodigy
  • 19th Korea Olympiad in Informatics, Bronze
  • 20th Korea Olympiad in Informatics, Gold (Minister of Information and Communication Award)
  • 21st Korea Olympiad in Informatics, Honorable Mention
  • 22nd Korea Olympiad in Informatics, Bronze
  • Intel ISEF 2006 Finalist

Try JOLDISK for free

Start for freeView pricing