Information is the lifeblood of any organization, and as a trusted and recognized leader for cybersecurity solutions, SRC has helped our U.S. Government customers define security requirements and implement strategies to secure their enterprise IT infrastructure from sophisticated internal and external attacks.

SRC provides objective recommendations to government and commercial information security officers to ensure mission and business success. Through scientific research, extensive education and hands-on experience, our cybersecurity experts have developed solutions and services to help protect networks and the information flowing through them.

SRC defines complex operational and technological requirements by researching and identifying best-in-industry solutions and delivering unbiased and credible recommendations. We deliver information assurance support to our U.S. Government customers in the following areas:

Information Assurance Policy and Program Planning

SRC seeks to ultimately enhance the customer's overall business processes through IA policy and program planning. This starts by defining an IA infrastructure and the roles and responsibilities. We then devise training standards, develop self-evaluation processes and identify existing or needed skill sets to implement an effective IA program.

Information Risk Analysis

SRC helps determine the sensitivity, criticality and lifespan of corporate information, taking particular note of "crown jewels." We then profile the user base, looking at the information needs, access privileges and characteristics specific to its use. Our analysts then conduct assessments that identify and correlate threats to vulnerabilities. We conclude this study with an estimate of the organization's information risk.

Protection Engineering

We develop processes for network monitoring and computer defense metrics. SRC also institutes vulnerability scanning in support of reliable, patch-level situational awareness and management.

Certification and Accreditation

SRC works with SCOs, ISSMs, and directorate acquisition, development and operations managers to establish security requirements and the C&A boundary. We define accreditation criteria, review certification test results and recommendations, and prepare the CIO to make informed risk management decisions.