SECURITY & PRIVACY
Information Security
Closing the Gap on Security and Privacy Risks
Organizations struggle to balance the demand for access to vital information with the need to protect it. Security breaches are rising while new technologies, communication channels, and regulatory requirements are rapidly entering the IT environment. SRA secures systems, networks and applications to provide data availability, integrity and confidentiality. Our strategies are designed to keep out security threats while keeping the organization open to technologies that enhance performance and growth.
Our team of more than 270 information specialists have experience in organizations like the National Security Council, the Department of Justice and the Department of Defense. Along with offering real-world insight, many have earned the highest professional certifications.
Highlights of our projects include:
- Working with the Security and Exchange Commission to develop an IT security architecture, provide a training and awareness program and develop compliance monitoring and enforcement
- Providing operations and support to the U.S. Department of Health and Human Services for their enterprise-wide public-key infrastructure (PKI) program, which enables them to electronically collect and transmit sensitive information securely
- Supporting the U.S. Environmental Protection Agency with a full range of IT advisory and assistance services to support their information policy, planning and program management initiatives
- Developing integrated privacy and security programs for a variety of federal government clients, to identify and mitigate potential privacy and security risks during all phases of IT systems design and development
Qualifications
SRA’s proven IA methodologies integrate the National Security Agency’s INFOSEC Assessment Methodology (IAM) and INFOSEC Evaluation Methodology (IEM) with federally mandated NIST guidelines; the merging of NSA and NIST requirements, combined with other tools and methods, was cited as a best practice by the NSA.
SRA has been appraised and rated in nine difference process areas against the latest, more rigorous IA-CMM version 3.1 and is the only rated systems integrator.
Certifications
From project managers to onsite engineers and analysts, team members have earned the highest professional certifications, including:
- National Security Agency Information Assessment Methodology (IAM) certification
- National Security Agency Information Evaluation Methodology (IEM) certification
- Certified Information System Security Professional (CISSP)
- SANS Global Information Assurance Certifications
- Certified Protection Professional
- Associate Business Continuity Professional (ABCP)
- Certified Business Continuity Professional (CBCP)
- Certified Disaster Recovery Planner (CDRP)
- Certified Information Security Auditor (CISA)
- Certified Information Security Manager (CISM)
- Certified Computer Examiner (CCE)
- Certified Intrusion Analyst (CIA)
- Cisco Certified Security Professional (CCSP)
- Cisco Certified Network Associate (CCNA)
- Cisco Certified Network Professional (CCNP)
- Cisco Certified Internetwork Expert (CCIE)