Assessment and Authorization

 

Specializing in IT Security assessments for government systems.

We have completed more than 225 security assessments for government systems and provided information security services to more than 20 government agencies.

Vulnerabilities pose a threat to systems because they can be exploited causing financial and reputational loss. The loss of reputation as it pertains to customers and employees is the ultimate loss for an organization. This loss directly correlates with the profit and loss (P & L). Proactive Security is no longer an “IT problem”. It is a business requirement. The proactive security starts with the understanding and tackling of the vulnerabilities of the systems. The vulnerabilities can be thought of as weaknesses or lapses that expose the systems to the risk of attack. The security assessments identify the weaknesses in the systems that can be used to deploy security measures to improve the security posture of the organization.

Security Assessment is a 4-step process:

  • Scope: Determine the systems to be assessed.
  • Focus: Assign value and importance to the identified assets.
  • Assess: Identify vulnerabilities.
  • Respond: Prioritize and mitigate/eliminate the vulnerabilities.

Our Assessment and authorization services include:

  • Security Assessments
  • Vulnerability Assessments
  • Continuous Monitoring
  • Penetration Testing
  • Security Policies and Procedures
  • System Security Plans
  • Risk Assessments
  • FISMA Audits
  • Compliance Scanning
  • Web Application Testing
  • Database Testing
  • Contingency Planning
  • Incident Response