The Prometheus Group has a proven track record working with federal, state and local governments during all phases of their Certification and Accreditation (C & A) process.

Our experts have been performing Certification and Accreditation for Information Systems since the publication of the DITSCAP (DODI 5200.40) in 1998. We provide unparalleled expertise and experience working with our customers to comply with all government regulations and guidance, including:

• FISMA/NIST 800 Series
• HSPD-12
• DCID 6/3
• OMB A-130
• DITSCAP/DIACAP
• NIACAP
• HIPAA
• Sarbanes-Oxley section 404
• ISO/IEC 27000 series (formerly ISO 17799:2005/BS 7799)
• COBIT

and other local and agency regulations as required for C & A.

As part of our C & A services, we provide program planning for security managers, C & A life cycle implementation for application and system owners, and full compliance assessment for auditors.

• C & A Program Development Support
• C & A Process Support
• Life Cycle Certification Support
  • Definition
  • Verification
  • Validation
  • Post-Accreditation
• Certification Audit Support

Our personnel are also trained to assess and provide support for classified and unclassified networks and hold many security certifications such as the CISSP, SSCP, CAP, CISM, CISA, NSA IAM/IEM and others.