Case Studies

Certification and Accreditation (C&A) - Veterans Affairs (VA)

ISSUE
The Veterans Affairs (VA) needed Certification and Accreditation (C&A) support that followed NIST Special Publication (SP) 800-37, “Guidelines for the Certification and Accreditation of Federal Information Technology Systems.”

SOLUTION

• DSA provided support to complete NIST SP 800-37 C&A System Security Plan Review and Analysis, Security Control Assessments; and Security Certification Documentation development

• DSA is participating by conducting Security Controls Assessments (SCA) at VHA facilities, validating security controls by creating and executing test plans and security control tests, documenting test results, aggregating test data, performing the appropriate analysis and developing reports and the recommended mitigations.

• DSA team members are working with a combination of VHA staff, VA staff, and contract resources

RESULT

• This effort covered 21 distinct geographic areas within the US and includes the inspection of over 150 computing infrastructures.

• The VHA was able to certify and accredit VHA’s VistA Legacy, WAN/LAN, and PBX systems by August 31, 2005.

1997-2008 © COPYRIGHT, DATA SYSTEMS ANALYSTS, INC.

SITEMAP