posted on August 23, 2011 05:30
Company to Provide Risk Management Framework Services to Federal Agencies
Reston, VA – August 23, 2011 – Knowledge Consulting Group (KCG), the leading provider of cybersecurity services to the government and a provider of business advisory services to the government market, today announced that it has been awarded a Blanket Purchase Agreement (BPA) by the U.S. General Services Administration (GSA) and the U.S. Department of Homeland Security (DHS) to provide cybersecurity services to the federal government. The BPA allows KCG to provide agencies with Certification and Accreditation (C&A) services to implement guidelines released by the National Institute of Standards and Technology (NIST) in Special Publication 800-37, Rev. 1, Guide for Applying the Risk Management Framework to Federal Information Systems, A Security Life Cycle Approach.
“The Risk Management Framework (RMF) is transforming federal cybersecurity by shifting the focus of C&A to real-time, operational security,” said Maryann Hirsch, President of KCG. “We are honored to have been selected to help the federal government implement this key guidance and support agencies in combating the growing number and scope of cyber attacks.”
Under the agreement, KCG will provide C&A services, consistent with the risk management process, for all information systems to ensure compliance with the Federal Information Security Management Act (FISMA). These include conducting the following tasks for agencies:
- Categorizing information systems
- Selecting security controls
- Implementing security controls
- Assessing security controls
- Authorizing information systems
- Monitoring security controls
Additionally, KCG will provide the following services:
- Perform an initial risk assessment
- Develop contingency plan documentation
- Perform continuous monitoring
- Conduct Privacy Impact Assessments (PIA)
- Conduct e-Authentication risk assessments
- Develop incident response plans
“KCG looks forward to working with agencies as they implement the RMF through near-term activities, such as complying with new FISMA requirements for automated continuous monitoring or developing longer-term risk management strategies,” said Hirsch.
Knowledge Consulting Group (KCG) is the government’s trusted advisor, providing cybersecurity services to the government and business advisory services to the government market. The leading provider of cybersecurity risk management, governance, operations, and compliance services to the Federal market, KCG is unmatched in its ability to meet the depth and breadth of Federal agency requirements needed to run cybersecurity programs, including a broad range of technical capabilities; experienced, certified cybersecurity professionals; and a strong record of past performance. KCG leverages its business strategy capabilities and industry best practices to provide business advisory services to the Government market that enable business transformation and organizational change that improves operations across mission-critical functions.
Headquartered outside of Washington, D.C. in Reston, Virginia, KCG is a privately owned business. KCG holds multiple prime and subcontracts with agencies and industry partners, enabling it to provide cybersecurity services to the Federal civilian, defense and intelligence, and homeland security sectors.