KCG to provide information security A&A services support to GSA

The US General Services Administration’s (GSA) Federal Systems Integration and Management Center (FEDSIM) has awarded a contract to Knowledge Consulting Group (KCG) to provide information security assessment and authorisation (A&A) services.

Under the contract, KCG will provide A&A services to the Office of the Chief Information Officer in GSA’s Federal Acquisition Service.

The company will also provide the services in accordance with the Federal Information Security Management Act, GSA security policies in order to ensure the protection of GSA major applications and general support systems as well as National Institute of Standards & Technology and Office of Management and Budget guidelines.

KCG president Maryann Hirsch said, "By undergoing regular security controls assessment activities, and developing a rigorous program of continuous monitoring, GSA and its customer agencies can be assured that its systems are secure."

The company will provide programme management, conduct penetration testing, develop a penetration testing report, test security controls, document all testing activities, review existing system security plans as a part of the contract.

In addition to developing a security assessment report, the company will provide services including developing a plan of action and milestones report; assisting with the implementation and management of an automated mechanism for A&A audits; and conducting continuous monitoring activities.

The $3.3m contract has 11 months period of performance with four one-year options.