| Maden
Technologies provides a comprehensive approach when performing systems
Certification and Accreditation (C&A) that includes both risk
assessment and system vulnerability analysis. We utilize a variety
of software and hardware in performing these key components of C&A
and have developed repeatable processes that are applicable across
both DOD and civilian agencies.
Systems
Certification and Accreditation
The Department of Defense (DoD) Information Technology Security
Certification and Accreditation Process (DITSCAP) and the National
Information Assurance Certification and Accreditation Process (NIACAP)
are process standards implemented by government organizations.
These standards are designed to ensure the security of information
systems and networks throughout their lifecycles, from acquisition
through termination. They also require that each system be certified
and accredited every three years or following a major system change
or operating system upgrade.
These requirements are growing increasingly more complex and new
directives state that all agencies must have a comprehensive information
security plan. The penalties for non-compliance are escalating,
with designated approving authorities assuming personal liability
for the systems they accredit.
As pressure increases to comply with these mandates, Maden Technologies
helps manage this process in the most consistent and cost-effective
manner ensuring an organization’s information assurance goals
are met. Our Certified Information Systems Security Professionals
(CISSP) are available to assist at anytime.
Information
Technology Risk Management
Risk mitigation and management is imperative in our net-centric
environment to protect the enterprise from internal and external
attack. We assess threat risk and then design and implement an infrastructure
customized to specific challenges and goals. We offer an end-to-end
consultative solution focusing on the IT environment; we evaluate,
analyze, recommend, and mitigate risk.
Our services include threat identification, vulnerability assessment,
risk management planning and implementation. Our analysis includes
identification and priority rating of vulnerabilities and we will
recommend an action plan for risk mitigation as well as manage the
change. As needed, we will train our clients on the methodology
for future use.
Maden Technologies IT risk management solutions are implemented
in both military and civilian agencies such as the Army and the
US Department of Transportation (DOT). |
