U.S. Department of Treasury – Internal Revenue Service (IRS)
Lanham, MD; Martinsburg, WV
ICT provided application assessments, vulnerability assessments, penetration testing oversight, and security policy formulation, design, and implementation. ICT also developed disaster recovery and contingency planning guides according to NIST and provided Security Awareness training to the IRS and the consulting support staff.
ICT provided key Information System Security (ISS) support under the IRS TIPSS 3 Contract. ICT security experts applied security engineering, information assurance, and system vulnerability analysis/assessment techniques in order to develop the system-wide ISS framework and structure for the new IRS business systems, while conforming to the industry's best practices and methodologies (NIST/FISMA). In supporting the IRS IT enterprise, our experts researched and analyzed federal directives and industry guidelines for applicability to the IRS infrastructure. Our ICT security experts brought to bear decades of proven industry experience in the fields of Public Key Infrastructure (PKI), Vulnerability Assessment (VA) techniques, security protocols, such as SSL and IPSEC, security hardware technology, security hardening techniques, LDAP and X.500 programming, Virtual Private Networks (VPNs), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), firewalls, and security products, such as RACF, CA-ACF2, KMS, and Exchange Server Advanced Security. ICT security experts authored all Technical Contingency Planning Documents (TCPD) as part of the Certification and Accreditation documentation for the US Treasury. These documents served as the disaster recovery/business resumption guides for the IRS IT recovery. ICT assisted in modifying the TCPD to address NIST 800-34, the contingency planning guide. Our task also included Computer Security Awareness training for IRS Engineering and Programming staff.
- Development of security documentation for implementation of security controls for Legacy/Internet/Intranet/Web Applications/Network Computing
- Information Systems Security/Firewalls/Critical Infrastructures
- Vulnerability Assessments and Penetration Testing
- Security Audits and FISMA compliance
- Risk Management and Risk Mitigation Planning
- Security Policy Formulation
- Privacy and Identity Management Requirements
- Security Design and Implementation
- Quality Assurance and Test Tools
- CMM III Environment
< Back to Case Studies
