Assessment and Authorization
iGov's process for Assessment and Authorization (A&A) within the Risk Management Framework (RMF) places initial focus on boundary definitions, definition of roles & responsibilities, and security categorization based upon data types and sensitivity. After conducting a comprehensive risk assessment, our team develops system security plans that explain the who, what, how, and how often for each security control, leveraging common or inherited controls where possible. Our teams also develops all supporting documentation, including risk assessments, IT contingency plans, security control assessments & test plans, security assessments reports, ATO letters, and agency-specific documentation.