Cybersecurity

INFORMATION ASSURANCE (IA) ANALYSIS

Overview

The DISA Risk Management Executive (RME) and DODIN Readiness and Security Inspections (DRSI) provide a collection of Information Assurance (IA) analysis services in support of addressing organizational security and assurance requirements.

Features

  • Command Cyber Readiness Inspection(CCRI): formal inspection conducted under the direction of USCYBERCOM's Enhanced Inspection Program.

  • Cybersecurity Service Provider (CSSP) Inspections/Assessments: review and validation of alignment to an accredited CDSP. Inspections are provided once every three years, and rates vary depending on the level of support.

  • Site Assistance Visits (SAV) are a process by which DISA Risk Management Executive (RME) and DODIN Readiness and Security Inspections (DRSI) personnel will conduct an on-site assessment of compliance and validation with mandated information assurance (IA), cybersecurity defense (CD), certification and accreditation (C&A), or other focus areas either as a stand-alone effort or in preparation for a scheduled inspection or evaluation.

  • Exercise-based OPFOR Emulation service aids customers in assessing their organization's CD posture or TTP(s). This service can provide the customer with payload development support, attack execution support, and penetration and exploitation testing support within the context of exercise or exercise-like events.

  • Dedicated Team Lead Support performs Team Lead/Security Control Assessor (SCA) functions on Certification Assessments. Certification Assessments may include review of self-assessments and other certification artifacts and/or leading a team to review a system/enclave where the system/enclave resides. The Team Lead will follow the C&A process guidance and normal procedures of a Team Lead as outlined by the Government. For each certification assessment, the Team Lead will prepare a certifier's recommendation, statement of residual risk, and certification assessment briefing slides.

  • Unique Customer Specific Requests include contracted efforts not captured in any of the other service descriptions. These requirements will be estimated per customer and will be billed on a reimbursable basis.

Rates

DISA RME and part of DRSI are Defense Working Capital Fund (DWCF) entities. As such, the cost of RME services and the CND Cybersecurity Assessment services will be billed directly to service recipients based on the approved, published FSO Rate Book. Rates published for the services represent the average cost of providing these services and actual charges will depend on the actual level of effort needed to complete a particular service.

How To Order

These services can be obtained by contacting:

Service Support

Technical Support

If you are experiencing technical difficulties, please contact:

New Service Requests

Mission partners interested in learning more about this service should contact: