JD Biggs & Associates, Inc. has demonstrated experience and success completing Security & Privacy engagements for Federal Agencies, Commercial and Private organizations.  These engagements consist of:

• Developing Enterprise Security Programs,
• Developing Enterprise and / or Application Specific Policies and Procedures,
• Developing Business Continuity & Disaster Recovery Programs,
• Creating / Updating Security Program Documentation;
  • System Security Plan (SSP)
  • E-Authentication Risk Assessment
  • Security Risk Assessment (SRA)
  • Updated Configuration Management Plan
  • Contingency Management Plans
  • Security Test & Evaluation (ST&E) Plan
  • Security Test & Evaluation (ST&E) Report
  • User Manual
  • Interconnection Security Agreements (ISA)
  • Memorandums of Agreement (MOA)
  • Privacy Threshold Analysis (PTA)
  • Privacy Impact Assessment (PIA)
  • Federal Register System of Record Notice
  • Plan of Action & Milestone (POA&M)
• Certification & Accreditation (C&A) of Major Applications and General Support Systems in accordance with NIACAP / DIACAP,
• FISMA compliance of Programs, Policies, Systems,
• Performing Risk Assessments, Conducting Vulnerability and Penetration Testing,
• Developing Security Assessment Reports (SAR) and briefing Designated Approving Authorities (DAA) and Stakeholders,
• Developing and Management of Plan of Action & Milestone (POA&M),
• Conducting Security Education Training and Awareness; FISMA Compliance, C&A, Risk Assessment / Management, Contingency Management & Disaster Recovery.

Our security and privacy consulting professionals are subject-matter-experts in defining Management, Operational, and Technical security requirements, mapping these requirements to test cases, completing required ST&E, updating security program documentation and briefing stakeholders on the results.