Norton Small Business
by Gen Digital
FedRAMP Status
Not FedRAMP Authorized
Impact Level
N/A
Category
Cybersecurity
Overview
Norton Small Business is a consumer-grade endpoint protection product from Gen Digital. It is not FedRAMP authorized and lacks the enterprise security controls required for defense contractor CUI environments.
CUI Risk Assessment
Not FedRAMP authorized. Using this tool for CUI creates compliance violations under NIST 800-171 and DFARS 252.204-7012.
NIST 800-171 Violations
Using Norton Small Business for CUI without FedRAMP authorization may violate these NIST 800-171 controls:
FedRAMP Compliant Alternatives
Frequently Asked Questions
Is Norton Small Business FedRAMP authorized?
No. Norton Small Business is a consumer product that does not hold FedRAMP authorization.
Can I use Norton to protect CUI systems?
No. Norton Small Business does not meet FedRAMP or NIST 800-171 requirements for protecting CUI systems. Use CrowdStrike Government or SentinelOne Government.
What is a compliant alternative to Norton?
CrowdStrike Falcon Government (FedRAMP High) and SentinelOne Government (FedRAMP Moderate) are authorized endpoint protection platforms.
Run a Full Tech Stack Audit
Check all your enterprise tools at once with our free CUI Compliance Auditor.
Launch CUI Auditor