Compliance

RL Goodworks Security Engineers and Analysts are skilled at industry recognized best practices for conducting Certification and Accreditations(C&A) and compliance monitoring. Systems are assessed employing industry guidelines from such entities as the National Institute of Standards and Technology (NIST), The DoD Information Technology Systems Certification and Accreditation Process (DITSCAP), Intelligence Community (IC), and Director of Central Intelligence Directive 6/3 (DCID 6/3). Our approach to the Certification and Accreditation (C&A) process is one that develops customer intimacy. Our clients are informed at every discovery point and assured that they have accurate data to make risk-eliminating decisions regarding their organization’s security stance. Lessons learned are tracked and discussed with each client in order to facilitate process improvement. The Plan of Action and Milestones (POAMs) are monitored during each phase of the engagement to ensure that POAMs are not only tracked but accomplished and closed when appropriate.