IT Certification and Accreditation (C&A)

 Project Snapshots –

• IT Certification and Accreditation (C&A) of National Institutes of Health (NIH) Systems
• NIH Information Technology Security Program Support
• C&A of NIH Electronic Reporting Administration System
• C&A of NIH Center for Information Technology (CIT) Employee Directory

Carson has 15 years of experience assisting federal agencies with all phases of their certification and accreditation (C&A) planning to comply with government regulations and guidance, including OMB A-130, National Information Assurance Certification and Accreditation Process (NIACAP), and the DoD Information Technology Security Certification and Accreditation Process (DITSCAP).

We conduct certification testing to make sure systems comply with the latest industry standards and government regulations. We follow best practices and government policies and guidelines to include DOD Directive 8500.1 and 8500.2, OMB Circular A-130, and NIST Special Publications. Our team uses a lifecycle management approach to facilitate and ensure information systems meet the requirements of certification and accreditation. We work closely with the government in all four phases: Definition, Verification, Validation, and Post Accreditation.

Network assessments are an integral part of the Carson C&A methodology. We can perform external and internal penetration testing, as well as network vulnerability assessments using a variety of commercial products.