Professional Services

 

Founded in 2001, Cipher has conducted more than 100 C&A’s, Technical Assessments and Security Audits. Our professional consultants have assisted state, local and federal government entities successfully tailor technology, processes and physical assets to meet their security and compliance needs.  Our highly skilled consultants, average 12 years of experience, and focus on one thing and one thing only - information security.  Cipher designs and deploys compliant security solutions that protect essential data and systems for enterprises that operate in diverse environments.  Our processes are mature, scalable, and adaptable to diverse regulatory and IT environments.

 

Cipher provides the following services:

 

Management Consulting Services

Enterprise Risk Management	Security Auditing
Risk Assessment/Analysis	Vulnerability Management
Application Systems Design and Implementation	Project Management
Security Assessments	Penetration Testing
Certification and Accreditation (C&A)	Security Test and Evaluation (ST&E)
Regulatory Compliance	Incident Response and Management
Security Architecture and Engineering	Security Operations Support
Security Training and Awareness/Education	Security Policy/ Procedure Development and Implementation

 Cipher's unique approach to Certification and Accreditation is based our utilization of our proprietary tool, AccrediCert.  AccrediCert is a Web-based intranet system that provides a Certification and Accreditation team with the ability to manage record and report on Certification and Accreditation activities. The AccrediCert system supports the full life-cycle management of C&A (Certification and Accreditation) activities. AccrediCert (Certification and Accreditation Management System) allows our C&A team and our clients to successfully automate all 4 phases of the C&A Process.  Traditionally most C&A engagements are performed manually.  This was a labor intensive process, riddled with the potential for mistakes and rework. AccrediCert significantly alleviates the level of effort required to successfully produce a complete and compliant C&A Package. Our experience at multiple government agencies has shown that a 30 to 40% reduction in total effort is achieved by using the AccrediCert application.  Moreover; the automation of the process ensures consistency of C&A package generation, consistent adherence to process, consistent application of required testing and evaluation procedures and 100% compliance with NIST and FISMA requirements.