Information Assurance

To ensure that today’s critical business needs are met, Enlightened offers comprehensive Information Assurance (IA) support. We understand that each entity is different, which is why we take a custom based approach to identifying and fulfilling security needs for your organization, instead of "cookie cutter" solutions.

Our Capabilities

Enterprise Risk Assessment and Auditing

Performing detailed security assessments using:

FISMA
NIST guidelines including 800-53 and 800-60
DITSCAP guidelines including DoDI 5200.4

Evaluating the performance of implemented security controls, identifying deficiencies, and providing recommendations for resolving outstanding issues.

Certification & Accreditation (C&A)
Assisting organizations in identifying the areas within their security programs that can be improved in order to ensure security measures are effectively implemented. This process includes the following phases: (1) Initiation; (2) Security Certification; (3) Security Accreditation; and (4) Continuous Monitoring.

Security Testing & Evaluation (ST&E)
Assisting organizations in determining their system’s compliance with defined security requirements and documenting the effectiveness of security control implementations.

Policy and Procedural Document Development and Implementation
Assisting organizations in developing and implementing business processes that have an auspicious effect on the company’s mission, contributing to the overall vision of the business.

Disaster Recovery Planning Services
Assisting organizations in their disaster recovery process by identifying data, hardware and software critical for a business to continue operations in the event of a disaster. We also create disaster recovery plans for coping with the unexpected in order to prevent the loss of vital data.

Active Monitoring for Intrusion Detection/ Prevention
Provides services to detect actions that attempt to compromise the confidentiality, integrity or availability of information systems. Manual intrusion detection techniques include the examination of log files or other evidence for signs of intrusions, including network traffic.

Configuration Management/ Security Engineering
Managing the security features and integrity of an organizations hardware, software, and documentation throughout a system’s lifecycle by controlling the changes to these artifacts.