Government agencies and service providers are under increasing pressure to make security a top priority, but this level of achievement can be a tangled web of expectations, challenges and financial concerns. The Federal Information Systems Management Act (FISMA) of 2003 was designed to help federal agencies implement a number of common best practices for information management and security. However, FISMA is also an emerging set of requirements. Gaining accreditation and certification in FISMA is a challenge for all government agencies. The Federal Information Processing Standards along with CERT special publications all drive FISMA, and FISMA is increasingly serving as a template for state, regional, and local governments for their security and IT management needs.

Anitian offers the following services for all government customers:

• Risk Assessment
  Identify critical assets, analyze risk and document risk reduction efforts. See Anitian's Risk Assessment page for additional information.
• Compliance Gap Assessment
  Determine the current state of compliance, identify gaps and recommend steps to remedy those gaps. Anitian will explicitly address the requirements of FISMA, DITSCAP/DIACAP or NIST publications.
• Penetration Testing
  Conduct tests to determine what security vulnerabilities exist on systems.
• Vulnerability Scanning
  Conduct regular security scans of systems to determine their state and ensure compliance with policies.
• Enterprise Security Assessment
  Anitian's Enterprise Security Assessment is a comprehensive suite of security assessment services including penetration testing, configuration review, social engineering, policy review and regulatory compliance assessment.
• IT Controls Assessment
  Analyze the configuration of key systems, infrastructure components or security controls to assess effectiveness.
• Policy & Procedure Development
  Review all organization security policies and procedures for compliance with FFIEC and NCUA rules as well as other applicable regulatory issues.
• Disaster Recovery & Business Continuity Planning
  Assess business objectives, risks and resources and develop sound Business Continuity Plans (BCP) to ensure continuous operation after a disaster or serious incident.
• Incident Response Planning
  Analyze business risks and develop procedures to respond and handle security or disaster events.
• Managed Security Services
  Anitian offers a extensive set of managed analysis and monitoring services.
• Accreditation Assistance
  Anitian will work with each client to help with the accreditation process.

For more information, please call 888.ANITIAN, or email Anitian Enterprise Security.