ISHPI.IA (Information Assurance)
From integration projects to Certification and Accreditation (C&A), ISHPI’s professionals possess complete life-cycle system security expertise for C5ISR and other mission critical systems. We possess over 100 years of combined IA and cybersecurity experience, including guiding organizations to reaching their ISO 27001 Information Security Management certification and securing Intelligence Community networks and systems. Our expert staff includes Security Engineers, Certification Engineers (CEs), Information Systems Security Managers (ISSMs), Information Systems Security Engineers (ISSEs), Information Systems Security Officers (ISSOs), Information Systems Security Representatives (ISSRs), and Continuity Engineers.
- CISSP, ISSAP, ISSEP, ISSMP, GIAC, XACTA, SBCI, CEH, and 8570.1-M certified IA professionals
- Supported CIA, NGA, NRO, NSA, DIA, FBI, DoJ, ATF, DHHS, DNI, DHS, FEMA, NDMS, SPAWAR, White House, U.S. Treasury, U.S. Navy, U.S. Coast Guard, and U.S. Air Force
- Experts in FISMA, FIPS 201/HSPD-12 (NIST 800-79), DIACAP, NIACAP, NISPOM, JAFAN, DCID 6/3, DoDIIS, and C&A
- Authority on securing systems and networks in accordance with DIACAP, DCID, NIST, NISPOM, DODIIS and other required federal, community and agency guidance
- Unique Proficiency in New DNI/CNSS C&A Process and Policies (ICD 503)
ISHPI.IA INFORMATION ASSURANCE SERVICES |
ISHPI.IA CONTINUITY ENGINEERING SERVICES |
Certification and Accreditation
Defense-in-Depth
Defense-in-Breadth
FISMA Compliance
Risk Management (Risk Assessment, Mitigation,
Response and Recovery)
Certification Testing
DCID 6/3, DIACAP, and NIST Policies
Vulnerability Assessment Testing
Cross Domain Solutions
Unified Cross Domain Management Office (UCDMO)
Process
Information Sharing Solutions
Proficiency in the United Kingdom Accreditation
Service (UKAS) (UK C&A process)
Proficiency in Australian C&A Processes
Physical Security (DCID 6/9, TIA, NIST)
OPSEC
Security Management
Security Architecture and Models
Telecommunications Security (WAN, MAN, VPN,
Remote Access Management)
|
Continuity Engineering
Policy Writing, Interpretation, Implementation and
Compliance with:
* NSPD-51 "National Continuity Policy"
* NCS Directive 3-10 "Minimum Requirements for
Continuity Communications Capabilities"
* NCS Manual 3-10-1 (Implementation Manual for
NCS D3-10)
* National Continuity Policy Implementation
Plan (NCPIP)
* DHS Security Federal Continuity Directives (FCD 1
and FCD 2)
* DoD 3020.42 Defense Continuity Plan Development
Business Impact Analysis (BIA)
Risk Management (Risk Analysis, Mitigation, Response
and Recovery)
Risk Analysis Methodologies
Emergency Preparedness and Response
Emergency Management Planning
Defining Primary Mission Essential Functions and
Mission Essential Functions
|
Download an easy to read and use version of our IA capabilities (PDF)