SecureInfo » Solutions » Certification and Accreditation (C&A) Solutions

“TurboTax^®” for NIST and DIACAP C&A

In many organizations, the Certification and Accreditation (C&A) process—an essential component of FISMA—is time-consuming, costly, complex and inaccurate. Organizations are demanding a faster, simpler, more cost-effective way to create, manage and measure C&A packages.

SecureInfo RMS simplifies and automates the C&A process and enables organizations to reduce costs, create a standardize C&A program and provide ready access to consistent, quality C&A packages for management reporting and Inspector General audits. SecureInfo RMS supports all phases of the DIACAP, NIST and D/CID processes, and guides users through the steps necessary to create consistent documentation and timely reports, including POA&Ms (Plan of Action and Milestones), to meet FISMA requirements. With RMS, users complete POA&Ms, DIACAP scorecards and other documentation in days instead of weeks it takes with spreadsheets and word processing, resulting in substantial time savings, reduced costs and timely reports. SecureInfo RMS also facilitates communications and sharing of critical information between agencies and departments, adding efficiencies to your C&A processes, resulting in stronger security practices.

SecureInfo RMS includes an unmatched content library that links and maps all federal, DoD, service branch (Air Force, Army, Navy, Marines), and intelligence community security requirements to applicable IA controls. The SecureInfo RMS content library is continuously updated by our C&A experts to ensure your organization is using the latest appropriate standards for information security risk management and compliance.

SecureInfo RMS Capabilities

Collaborative Package Management™ – Automate and simplify C&A process by enabling IA professionals to build, manage and collaborate on C&A packages.
Complete Content Traceability™ – Link regulations, standards, policies, controls, tests and test results for compliance tracking and reporting.
Extensible Policy Framework™ – Easily add agency-specific requirements, policies and content without relying on vendor for customization
RMS Dashboard – Gain enterprise-wide visibility and centrally manage and measure C&A projects more effectively with portal-based reporting.
Integrated POA&M Reporting and Management – Reduce time, effort and costs spent documenting and following up on remediation activities with integrated POA&M and C&A
iRTM (Interactive Requirements Traceability Matrix) – Streamline C&A process with a single interface to score tests, identify security weaknesses, and recommend and document remediation activities
Integrated Vulnerability Database – Include up-to-date risk mitigation data in C&A package

SecureInfo RMS has achieved Common Criteria Evaluation Assurance certification under the National Information Assurance Partnership's (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS). This certification underscores our commitment to deliver trusted risk management solutions that meet the stringent security requirements of the federal government.

More than 70 Federal customers rely on SecureInfo RMS, including Department of Homeland Security, NASA, the United States Army and the United States Air Force.

SecureInfo RMS is the industry’s first C&A product to provide anytime, anywhere secure C&As. SecureInfo RMS XD cuts the time and effort required for C&A interviewing and system testing by enabling users to work securely and independently, disconnected from the server. Users then synchronize with the server when convenient for centralized management and reporting.