Department
of Defense Joint Personal Property Shipping Office, Washington,
D.C. Area
The
Joint Personal Property Shipping Office, Washington, D.C. Area,
in accordance with the Department of Defense Information Technology
Security Certification and Accreditation Process (DITSCAP) Application
Manual, needed to prepare certification and accreditation documentation
for the enterprise. The Joint Personal Property Shipping Office
has a diverse information technology network comprised of Unix and
Windows 2000 servers, Windows 2000 desktop stations, and a variety
of web-based and non-web-based applications.
Maden Technologies completed the following activities:
- Identified
applicable Office of Management and Budget, Department of Defense,
Military Traffic Management Command, Army and Joint Personal Property
Shipping Office Information Security, and Certification and Accreditation
directives
- Identified
applicable industry standard best practices for information technology
networks used to transfer sensitive information
- Conducted
onsite interviews with staff personnel and identified current
procedures, tools, and level of training
- Designed
and implemented a Security Risk Assessment using applicable directives
and industry best practices including, but not limited to, physical
security, information assurance, backup procedures, operating
systems, network attached elements, application design analysis,
and commercial-off-the-shelf security assessments
- Evaluated
a standard vulnerability scan conducted on all Windows 2000 desktops
and servers
- Identified
support document requirements
- Prepared/updated
support documentation
- Prepared
the System Security Authorization Agreement, supporting appendices,
and supporting material as required by the DITSCAP
All
process findings, the prepared DITSCAP package, and procedural requirements
were reviewed with site information technology supervisory and systems
staff. Recommendations for DITSCAP phase 4 — post-accreditation
and future system/application design criteria were also presented.
The end result will be a certification package that the appropriate
Department of Defense officials can use for certification of Joint
Personal Property Shipping Office systems and for any accreditation
required.
For more information about our solutions and offerings, contact
Nazanin Tavassoli or Jack Carlen. |
