NSA certifies vendors for vulnerability and security assessments
The National Security Agency has certified seven companies to help agencies evaluate their information security.
The Infosec Assessment Training and Rating Program providers must use NSA's Infosec Assessment Methodology or similar techniques. The program will help agencies comply with Presidential Decision Directive 63 and other regulations calling for vulnerability assessments of information systems.
Providers also can give training in the program's methodologies. The providers certified are Backbone Security.com Inc. of East Stroudsburg, Pa.; Booz, Allen & Hamilton Inc. of McLean, Va.; Computer Sciences Corp.; Electronic Data Systems Corp.; Lucent Technologies Inc. of Murray Hill, N.J.; SRA International Inc. of Arlington, Va.; and TrustWave Corp. of Annapolis, Md.
for more details.
William Jackson is a senior writer of GCN and the author of the CyberEye blog.