Meet federal security requirements and protect citizen data with BOSSS government-grade cybersecurity platform.
FedRAMP
Controls Ready
FISMA
Compliance Support
NIST 800-53
Framework Mapped
Zero Trust
Architecture
CJIS
Law Enforcement Ready
HIPAA
Health Data Compliance
PCI DSS
Payment Security
CMMC
Defense Cybersecurity
We understand the unique security challenges facing government organizations.
Navigate complex federal security authorization requirements.
Safeguard sensitive citizen PII and government records.
Maintain security across multi-agency environments.
Maximize security with limited public sector budgets.
Simultaneously satisfy CJIS, HIPAA, and PCI DSS requirements across diverse agency functions.
Purpose-built solutions for government security and compliance.
Pre-mapped controls for FedRAMP authorization
Continuous monitoring and POA&M management
Privacy impact assessments and data protection
Centralized security management across agencies
24/7 security monitoring with automated reporting
Identity-centric security for government networks
Pre-built controls and audit workflows aligned to the FBI CJIS Security Policy for law enforcement and criminal justice agencies
HIPAA Security and Privacy Rule compliance for agencies handling protected health information, including Medicaid, VA, and public health programs
Payment card security controls and automated evidence collection for agencies processing citizen payments
Five situations a county government actually faces, across independently elected offices.
Nordvik County, Minnesota — a composite organization in the BOSSS demo environment
The situation
Permitting and land records encrypted, with no isolated backup to fall back on
A phishing email reaches the permitting division, credentials are harvested through a cloned identity-provider page, and the attacker moves laterally over SMB. Ransomware encrypts the permitting and land-records file share. Recovery exposes a second problem: backup jobs are not isolated per department, so a clean restore is harder than it should be.
Who is involved
Scenario timing
How BOSSS handles it
Encryption behaviour on the land-records share raises the flagship alert
Ransomware beacon / mass file-encryption on the permitting/land-records share
Escalated to a full investigation case
Ransomware Investigation — Permitting/Land-Records File Share
Formal incident record covering the encrypted county systems
Ransomware on County Systems — Permitting/Land-Records File Share
The recovery weakness is recorded as its own finding
No Isolated Backup Segmentation for Per-Department Jobs (Ransomware Recovery Gap)
That finding becomes a tracked plan of action and milestones
POA&M — Per-Department Backup Isolation Gap (Ransomware Recovery)
The response runbook governs how the incident is worked
Ransomware Response Runbook
What this makes possible
What it touches
Entities
Nordvik County
Public Works, RecorderTorvald, MN
Locations
Nordvik County Government Center
Headquarters · land records, ITTorvald, MN
Nordvik County Public Works & Highway
Office · permittingTorvald, MN
Nordvik County DR / COOP Site
Disaster Recovery SiteNorthbay, MN
Applications
County Permitting Portal
Initial access pathTorvald, MN
Recorder's Land Records System
EncryptedTorvald, MN
Meridian Identity SSO
Cloned login pageTorvald, MN
Granite Shield Endpoint (EDR Console)
Torvald, MN
Vendors
Meridian Identity Solutions
SSO / identity providerSan Francisco, CA
Granite Shield Endpoint Security
Endpoint detectionAustin, TX
Lodestar Security Analytics
SIEMReston, VA
Cascadia Network Services
WAN connectivitySeattle, WA
Data
Recorded Deed/Title Record
~95,000 recorded instrumentsTorvald, MN
Recorded Mortgage/Lien Record
~38,000 active mortgages/liensTorvald, MN
Property Parcel Record
~95,000 taxable parcelsTorvald, MN
Survey Plat Map
~4,200 recorded platsTorvald, MN
Why BOSSS
Built with federal security requirements in mind, helping agencies achieve and maintain compliance.
Key Benefits:
See how BOSSS can help your organization achieve security and compliance goals.
We use strictly necessary cookies to run this site. With your permission we would also use analytics and marketing cookies, including session recording. Cookie Policy