Federal Desktop Core Configuration (FDCC)
The Federal Desktop Core Configuration (FDCC) is a security mandate for PC standardization from the Office of Management and Budget (OMB).  The FDCC provides a single-standard, enterprise-wide, managed environment for PCs running Microsoft Windows. By establishing a common configuration for the enterprise rather than hundreds of costly, locally created configurations, the FDCC helps the Federal Government improve security, reduce costs, and reduce application compatibility issues.

In February 2008, all Federal agencies must ensure that their PCs comply with the FDCC mandate and be on the same security configuration.  As a result, there is a need for an efficient, cost-effective implementation process and a need for effective auditing tools. Persystent is the only software application that enforces the FDCC standard of a PC – on or off the network.

Persystent allows administrators to set and enforce PC configuration policies and automatically discover and remediate policy deviations.  FDCC requirements can change multiple times per month. Managing PCs with Persystent keeps them in synch with the latest FDCC update as you deploy it across your organization. If a user changes the configuration of a desktop/laptop, that asset becomes non-compliant. Persystent automatically restores compliance every time the PC is turned on. Persystent also provides verifiable control and reports any changes to FDCC standard. 

Persystent helps at each of the four phases of FDCC implementation and maintenance:

1. Build– Persystent automates the process of building a fully compliant configuration baseline. And, as requirements change, you can change the base FDCC image.
   
   
2. Deploy– Persystent deploys the baseline FDCC image across all desktops/laptops. As SCAP components are updated through third party deployment tools, Persystent will update and deploy the new FDCC image.
   
   
3. Manage– Every time a PC is booted, Persystent rapidly reviews the operating system, registry, applications, and other settings. It then quickly removes, repairs, or restores individual files according to the FDCC configuration image stored in a hidden cache on the boot drive.
   
   
4. Audit– Any third-party audit tools such as a Security Network Scanner will show a higher success rate of patch deployment. Persystent automatically logs every configuration change, including setting changes and software installation and removal.

To learn more about the FDCC mandate and how Persystent can enforce and manage the FDCC, download our FDCC whitepaper.