Dakota provides a comprehensive range of IT systems security services. We understand the IT Security architecture model and maintain currency on the array of FIPS and NIST Special Publications. We have experience in performing all phases of the certification process and assisting with the preparatory work for accreditation at multiple Agencies. We provide full IT Security program support services including FISMA compliance, policy and procedure writing, and continuous monitoring. Dakota also performs operational security services including security operations center (SOC) staffing, vulnerability scanning and assessment, and incident handling, reporting, and monitoring services.

The following list identifies the range of activities performed in the various CyberSecurity area.

• System Security plan development (NIST SP800-18)
• Risk Assessment (NIST SP800-30)
• Self-Assessment (NIST SP800-53A)
• ST&E Methodology and Testing Support
• Operational & Maintenance Services
• ISA/MOU creation (NIST SP800-47)
• POA&M creation and reporting
• Privacy Impact Analysis
• Continuation of Operation Plan (COOP)

• Vulnerability Scanning
• Incident Handling
• Incident Reporting
• Intrusion Detection
• Intrusion Prevention
• Malicious Logic Analysis
• Central Log Analysis
• LAN/WAN Management
• Data Loss Prevention

• Development and review of IT Security Program
• Development of IT Security Policies and Procedures
• Continuous Monitoring Activities
• FISMA 2010 Integration
• OMB 130 Compliance
• Information Assurance

• Integration of security into core business processes, e.g., acquisition, systems life cycle, change management, and disposition of systems