202-741-5700

Need more help?

800 Connecticut Ave.

NW Suite 300, Washington, DC 20006

FISMA A&A

Secure your consultation today.

FISMA A&A

The Federal Information Security Management Act (FISMA) outlines valuable controls for protecting information systems. Compliance with the law is complex and time consuming. ACSG delivers the benefits of reduced cost and complexity of FISMA compliance by identifying non-compliant areas planning remediating needed for compliance prior to involvement from the Certifying Authority (CA).

ACSG has extensive experience securing the networks and data of government agencies. ACSG’s FISMA experts bring a thorough understanding of the risks agencies face and offer federal agencies Assessment & Authorization (A&A) services, asset classification, risk assessments and ongoing security services to obtain an Authorization to Operate (ATO) or maintain a traditional Agency ATO aligned with cloud services and/or FedRAMP.

FISMA A&A processes

Our processes, tools and methodologies are based on the core components identified by FISMA and established by NIST.
Our FISMA services are based upon Risk Management Framework (RMF) and include:

  • Developing a System Security Plan (SSP) and help clients develop and maintain documents that detail internal controls
  • Providing a FISMA risk assessment that demonstrates the independent assessment of the control environment
  • Delivering penetration testing and vulnerability assessments that identify and prioritize weaknesses through physical, logical and social testing techniques
  • Providing services to support security authorization that offer agency officials the confidence they need to sign off on security system security posture.
what we deliver

FISMA Authorization & Assessment Services

Complete Risk Management Framework Lifecycle

Security Control Implementation

Policy & Procedure Development

Security Control Assessments

ISO/ISSO Support