|
On today’s increasingly network-centric battlefield, the myriad of information being transmitted, received, and stored is just as vital to the Warfighter’s overall mission success as the weapons and munitions being employed. Accordingly, SURVICE has been able to leverage its decades of experience identifying and mitigating combat system vulnerabilities and apply the lessons learned to the ever-changing challenges of operating in a network-centric environment. We understand the relationship between the three tenets of Information Assurance (IA) – Confidentiality, Integrity, and Availability (CIA). And we also recognize that ensuring our forces’ data and data channels are always available, reliable, and protected from external and internal attacks is a vital and never-ending task. Notable IA services that SURVICE provides include:
- Coordination, analysis, and verification of compliancy with DoD and Services IA standards -- including the Defense Information Assurance Certification and Accreditation Process (DIACAP), Federal Information Security and Management Act of 2002 (FISMA), and National Institute of Standards and Technology (NIST).
- IA test planning, test event support, data collection, and system assessment in support of developmental and operational testing.
- Security Posture Assessments, Operations Impact Analyses, and Vulnerability Resolution Support.
- IA input to acquisition documentation needed by program managers (PMs)—including Initial Capabilities Documents (ICDs), Capability Development Documents (CDDs), Capability Production Documents (CPDs), and Test and Evaluation Master Plans (TEMPs).
- IA input to system evaluation documentation needed by evalutors—including Capabilities & Limitations Reports, System Evaluation Plans (SEPs), Operational Test Agency Assessment Reports (OARs), and Operational Test Agency Evaluation Reports (OERs).
- IA subject-matter expertise—including the development of DIACAP Implementation Plans (DIPs); Security Policies (SPs); Business Continuity Plans (BCPs); Continuity of Operations Plans (COOPs); Disaster Recovery Plans (DRPs); Command, Control, Communications, Computers, and Intelligence (C4I) systems; and IA Awareness Training.
|
