Information Assurance SmartBUY Agreements
Information Assurance software protects and defends information systems and data by providing cybersecurity tools to ensure system availability, integrity, authentication, and confidentiality.
Available to state, local, and tribal governments
Some of the agreements below are available for state, local, and tribal governments through the Cooperative Purchasing program.
Note: The links below go to nongovernment websites.
Certification and Accreditation (C&A) software
Xacta
Reseller: Telos Corporation
Xacta provides web certification and accreditation (C&A) software and consulting services. Xacta Web C&A is the first commercially available application to automate the C&A security process.
Situational Awareness and Incident Response (SAIR) Tier 1
BigFix, Inc.
Resellers:
- Autonomic Resources (small business, available to state, local, and tribal governments)
- Intelligent Decisions, Inc. (small, minority-owned, available to state, local, and tribal governments)
BigFix products and technologies include Unified Management Platform, Patch Management, Security Configuration Management, Asset Discovery, and Inventory modules along with Power Management, Client Manager for Anti-Malware, and Network Access Control. These products enable easy integration of third-party anti-malware modules and integrate network access management with configuration management.
McAfee
Reseller: Arete Government Solutions, LLC (small business, available to state, local, and tribal governments)
McAfee products include Policy Auditor, Remediation Manager, and Vulnerability Manager, tools that are tailored to meet today's demand to secure government IT infrastructures. Additionally, they allow manual audit processes to be efficiently automated.
Symantec
Reseller: The Winvale Group, LLC (small business, available to state, local, and tribal governments)
Symantec offers information security solutions that prioritize and measure IT risk against policy and compliance objectives. Symantec's Risk Automation Suite integrates the discovery of assets, vulnerability management, configuration management, and policy management in a single, easy to deploy, easy to manage package.