Information Assurance
Information Systems Security -
We use a layered approach of overlapping controls, monitoring, assessment, and response to ensure the overall security of it its information. We developed the following practices necessary to reasonably safeguard confidential information for our clients.
>Collections - The confidentiallity of information should have an identifiable source to cofirm legitimacy.
>Data Review - All information should be reviewed and classified according to its use, sensitivity, and importance.
>Access Controls and Transfer of Data - Access Controls must be in place to identify and authenticate who is authorzed to access the specified infomation and at the waht level and to ensure that each individual within the organzation structure has the proper right to access data.
DITSCAP to DIACAP Transition (Certification & Accreditation) -
We assist with the transition DITSCAP to DIACAP or the maintenance of the DITSCAP process which our clients have in place currently.
>We remain current on the changes and new requirement which DOD set forth for the processes to ensure our clients remains up to date.
>We perform or assist with the Certification & Accreditation process so that the organization can maintain its Approval to Operate (ATO).
COOP Plans, Procedures, and Policies -
In today's environment our clients need a support element that can assist it or lead it to recognize or plan for threats, and changes that maybe harmful to it 'Networks or Infrasturctures".
Education, Training, and Awareness -
CLD assisted training modules for webbased training is vital to our clients. We seek to provide the necessary skill set or assist the organizations (our clients) with establishing an education, training, and awareness programs for employees to include each contractor which is assigned to the organization for work assignments.
Technical Security and Subject Matter Expertise -
CLD provides security planning, including the assessment of security risks, preparing responses to security related data calls (e.g. Privacy Act responses) and supporting Certification and Accreditation activities, including tracking Plan of Action and Milestone (POA&M) tracking. Adequate support requires expertise in security standards and regulations.
We work with each client to ensure an IA program that works for it organization and it personnel.
|
|