CRGT

Identity and Access Management (IdAM) ensures that the right people have access to the right services. IdAM promotes system simplicity, security, and operational transparency, in addition to facilitating accessibility, collaboration, and shared management.

CRGT has a keen understanding of federal mandates, legislative regulations, and compliance with technical standards and guidance, including verification of credentials, card issuance, physical and logical access controls, auditing, transaction logging, and reporting. Our broad range of IdAM expertise includes single sign-on (SSO) solutions for web-based and legacy applications. We effectively automate key identity management processes, including user and mailbox provisioning, password management, and delegated user and group management. Our solutions are designed, deployed, and operated in full compliance with federal government standards including FISMA, HSPD-12, NIST, and FIPS.

We employ a business-based approach to IdAM deployment that goes beyond simple “technology insertion” in order to ensure that our solutions address client security concerns. As a key enabler of business requirements, IdAM implementations reduce risk, heighten user IT experience, and standardize security policies across mission-critical applications. However, without an effective enterprise strategy, identity management will constrain rather than enable business value.

To ensure that client IdAM program goals are met in a cost-effective, business-focused, secure, and compliant manner, we begin by presenting your organization with an actionable roadmap that includes design, acquisition, installation, configuration, maintenance, testing, and training for all necessary hardware, operating systems, and IdAM-related software and services. We employ a phased approach to implementation that can be modified as necessary once your organization’s stakeholders have been engaged. Our methodology incorporates a pilot phase to reduce the overall risk associated with a complex rollout of IdAM services.

CRGT employs a variety of privacy and security regulations when performing Federal Information Security Management Act of 2002 (FISMA) security assessments, including:

• The Privacy Act of 1974 which states “No agency shall disclose any record which is contained in a system of records by any means of communication to any person, or to another agency, except pursuant to a written request by, or with the prior written consent of, the individual to whom the record pertains…”
• National Institute of Standards and Technology (NIST) standards such as NIST SP 800-53 Recommended Security Controls for Federal Information Systems.
• National Institute of Standards and Technology (NIST) standards such as NIST SP 800-63 Electronic Authentication Guidelines.
• Federal Information Processing Standards (FIPS) guidelines such as FIPS 199 Standards for Security Categorization of Federal Information and Information Systems.

We design our IdAM solutions in full compliance with industry standards, guidelines, and federal regulations in order to facilitate customer mission objectives and foster national security.

For more information on how we can help meet your Identity & Access Management challenges contact us at info@crgt.com.