Agencies have been slow to implement programs and slow to pass assessments. C&A is complex and confusing! It takes time to read the latest NIST guidelines, understand the requirements, implement new controls, verify that systems are compliant, document procedures, and create the certification package.

CBMI can help.
The best way to achieve FISMA goals is to plan for security in the system lifecycle. We provide C&A program planning, life cycle implementation, and compliance assessment support.

To help your agency or contractor through the C&A maze, our consultants can:

• Categorize your information system
• Help to select or augment baseline security controls
• Assess your security controls
• Help to implement security controls
• Work with you to complete a full suite of security documents
• Support you during the assessment and remediation processes
• Guide you in monitoring security controls

CBMI has experience with C&A planning, lifecycle implementation, compliance assessment support, remediation, and recertification. We have written all required security documents, maintained Plans of Action and Milestones (POA&M), developed and implemented policies and procedures, and worked with clients to interpret C&A requirements, pass assessments, and meet C&A goals.

We will support you through any or all phases of the C&A process.