|
COMPLIANCE ASSESSMENT & VALIDATION (CAV) CENTER OF EXCELLENCE (COE)
DIACAP Support for Commercial Software Developers
Many commercial software vendors who develop applications for DoD customers are finding that current DoD guidance requires these applications meet Information Assurance (IA) controls or security features prior to acquisition. Some vendors utilize employees with IT and IA backgrounds to facilitate meeting these requirements while others contract specialized IA companies to provide this specialized assistance and guidance. Many vendors are also finding that some end customers desire the certification and accreditation (C&A) costs to be absorbed/shared by the vendor wishing to sell to the government or in some way rolled into the cost of the application.
Our seasoned staff of engineers and information assurance analysts have years of experience working with software vendors and program offices to ensure desired or acquired applications meet the IA and regulatory guidance and they can successfully complete the tasks and deliverables associated with the DIACAP and each Service’s specific implementation requirements, including the applicable data repository. Our experience in this arena dates back to the 90s before the DITSCAP was in effect, has continued through the years of DITSCAP guidance and continues through the present where we have been providing DIACAP support services to end users and software vendors since DIACAP was first implemented in 2006. We also have years of experience providing similar support to the Federal Sector under a variety of NIST-based C&A processes.
We’ll be happy to discuss and/or provide any support required from assisting with identification and compliance with required IA/security controls during system development, to independent verification and validation of IA control compliance, documents and artifacts, to completion of full DIACAP support services. We also provide DIACAP and NIST-based C&A training courses certified by the Committee on National Security Systems (CNSS) as well as a variety of IT Security and IA related commercial certification courses that may assist a vendor or program office in meeting or successfully maintaining the security of the application over its life cycle. Please contact us if you’d like additional information or clarification on our support service offerings.
|
