USDA DISC Security Governance Branch A&A Support

The contract scope of work requires TDG to support Digital Infrastructure Services Center (DISC) in conducting RMF Steps 4 and Step 6 assessments as well as sampling testing in support of A123 reporting requirements, in accordance with the new USDA Seven Step Risk Management Framework (RMF) process guide.  TDG, as a member of Team Aretum supplies Senior level assessors and SMEs to conduct assessments for DISC information systems including the physical Data Center in Kansas City, MO and major General Support Systems (Midrange, Mainframe, Cloud Access Security Platform) that host USDA major applications for most sub-Agencies.  Since DISC is a service center for USDA, TDG also supports the assessment and integration of security into customer hosted systems.  Currently we are supporting the DAITO group within Office of the Chief Information Officer and systems within the OCFO.   This has included work with systems that are migrating to AWS and Azure Cloud Platforms and also the newly implemented Oracle Open Shift and Enterprise Container Platforms.  TDG provides support in creating Security Assessment Plans, sampling protocols for A123 requirements, reviewing Contingency Plans and Tests, Incident Response testing, and performing security assessment testing in accordance with the Risk Management Framework.  Evidence is gathered to support each individual test with findings and evidence uploaded into CSAM at the test level.  Our findings, risk reports and plan of actions and milestones are briefed to the System Owners and the Security Governance Branch management team.  This work supports approximately 30 information systems hosted on physical, virtual and cloud servers as well as the new applications being migrated to DISC.