The Department of Defense (DoD) Information Technology Security Certification and Accreditation Process (DITSCAP) is the DoD’s legacy certification process that has been replaced by a new certification process called the DoD Information Assurance Certification and Accreditation Process (DIACAP). Tapestry can assist legacy DITSCAP-certified systems in their transition to the DIACAP standard, which will provide continuity in the areas of compliance and secure operation. The DIACAP is designed to reflect the connected (net-centric) state of today’s systems and software applications—enabling those items to seamlessly integrate in the Global Information Grid (GIG) without posing new threats and vulnerabilities to other functions within the GIG. The DIACAP is the standard DoD process for identifying, implementing and validating Information Assurance (IA) controls for all DoD Information Systems, throughout the Product Development Life Cycle (PDLC)—from Concept through Decommissioning Phases.
For emerging systems and technologies, Tapestry will develop a DIACAP-compliant security strategy and produce the required DIACAP documentation and artifacts that demonstrate a Program Office’s IA due diligence. In addition, Tapestry’s certified IA practitioners will provide IA compliance testing and verification, secure application development requirements and metrics, and system and network security engineering support. Some of the DIACAP focus areas supported include:
- Initiation and Planning
- Designing a Tailored DIACAP Approach
- System Identification Profile (SIP)
- DIACAP Implementation Plan (DIP)
- Implementation and Validation of Assigned IA Controls
- DIACAP Scorecard
- DIACAP Artifacts as Required
- Plan of Actions and Milestones (POA&M)
- Performing Annual Compliance Maintenance and Reviews
- Configuration Control and Management
- Risk Management
- Decommissioning