|
Certification and Accreditation
|
SOLUTE has a dedicated Information Assurance (IA) team with the expertise necessary to guide any hardware or software system through the complete Certification and Accreditation (C&A) process. We are capable of managing C&A projects from initiation through Authority To Operate (ATO) approval and can provide you with complete support, including assessment, strategy, testing, and remediation, in order to ensure complete protection. SOLUTE can address all the C&A requirements of the Department of Defense (DoD) Information Assurance Certification and Accreditation Process (DIACAP); we are also a registered Navy Certification Agent. Our Information Assurance analysts and engineers can offer you expertise in standards and policies affecting DoD and other software and systems. We are capable of guiding you through the security challenges of the 21st century and providing the highest levels of assurance.
|
|
To address this need, SOLUTE has become a registered Navy Certification Agent in IA, recognized by the Space and Naval Warfare Systems Command (SPAWAR) Certification Authority. This allows the company to provide Independent Verification and Validation (IV&V) of networks, enclaves, and applications to be used throughout the Navy, as well as systems for Joint forces and the other Services. With decades of combined experience, our IA analysts and engineers are experts in all applicable Information Assurance standards and policies, including:
|
- DoD Information Assurance Certification and Accreditation Process (DIACAP) (affects all DoD systems)
- DoD 8500.1 and 8500.2 directives
- Director of National Intelligence (DNI) Directive, Intelligence Community Directive (ICD) 503
- National Information Assurance Certification and Accreditation Process (NIACAP)
- National Institute of Science & Technology (NIST) SP 800-37
- Federal Information Processing Standard (FIPS) 140-1
- Federal Information Security Management Act (FISMA)
- National Industrial Security Program Operating Manual (NISPOM)
|
|
SOLUTE is familiar with the Defense Information Systems Agency (DISA) standards and Navy Network Warfare Command (NETWARCOM) business processes, in addition to having expert knowledge of Cross Domain Solutions (CDS) and navigation of the approval process with the Unified Cross Domain Management Office (UCDMO). SOLUTE’s staff includes cleared personnel with specialized Certified Information Systems Security Professional (CISSP) and Certified Secure Software Lifecycle Professional (CSSLP) credentials. Our engineers are sensitive to customer C&A timelines for both new and re-accreditation projects. We use the latest DISA provided Security Technical Implementation Guides (STIGs), Security Checklists, Security Readiness Reviews (SRRs), and DoD-licensed scan tools in the performance of IA services. We are also technology-independent, recommending and implementing security solutions in accordance with the individual needs and risk profile of each project. SOLUTE provides comprehensive IA support for both classified and unclassified systems, software, and networks. Our analysts and engineers are also experienced in performing both site and type accreditations.
|
|