Security Assessment and Authorization

Company needs to have previously performed Security Assessment and Authorization (SA&) activities. As part of the evaluation of security control implementation interviews were also conducted with NIDCD IT management to better understand the operational and management aspects of the environment. In-depth review of security documents including System Security Plan (SSP), Configuration Management Plan (CMP), Business Impact Analysis (BIA), Privacy Impact Assessment (PIA), E-Authentication document, etc. Upon conclusion of the security assessment, members were able to identify security concerns pertaining to the unique environment and present these concerns to IT management. Solutions were presented as well as a method to remediate these concerns to improve the overall security posture of