Department of Defense (DoD) acquisition programs have the added challenge of developing technology systems with information assurance (IA) embedded from program concept until its eventual retirement. Tapestry Solutions can assist program managers with developing IA strategies that provide appropriate protection for technology acquisitions and comply with federal legislative requirements (e.g., Clinger-Cohen Act). The DoD 5000 series of publications governing Defense acquisition programs provides the governance requirements for DoD program managers to comply with the Clinger-Cohen Act legislation and include significant IA due diligence responsibilities. Tapestry’s Acquisition Information Assurance (AIA) support services provide the technical security knowledge to empower program managers to complete milestone-driven IA activities and withstand the close scrutiny by the program’s Milestone Decision Authorities (MDA).
AIA also encompasses the design and development environment, protecting and preserving any government technological advantage—denying adversaries the ability to duplicate a program’s effort. Additional benefits of AIA contribute to the program manager’s prevention and deterrence of espionage, sabotage and countermeasure activities by the enemy. Specific AIA offerings include:
- Develop Security Classification Guides (SCG)
- Design, Draft and Implement IA Strategies
- Recommend, draft and Implement IA Policies, Access Controls, Procedures and other Security Requirements
- Inject IA language and Requirements to other Required Acquisition Documents (e.g., Initial Capabilities, Capability Development and Capabilities Production documents)
- Conduct Critical Program Information (CPI) Surveys
- Develop Program Protection Plans (PPP)
- Produce Anti-Tamper Plans
- Conduct Program Protection Surveys (PPS)and Validate Program Protection Efficiency
- Develop Technology Assessment/Control Plans (TA/CP)
- Formulate Security Engineering Master Plans (SEMP)
- Define Developer and End User IA Training Requirements throughout the Defense Acquisition Life Cycle