Solutions for FISMA and DoD 8570 Compliance

Computer-based Training Curriculum for FISMA and DoD 8570

Security Innovation has delivered a variety of solutions for the Federal Government including the DoD, Administrative Office (U.S. Courts), AFRL, NSA, Army, Navy, Darpa and Spawar.  The company has been funded on several Federal Government sponsored research projects including a ground-breaking study that resulted in our How to Break Software Security methodology which has been rolled out to numerous agencies in the form of training and application testing services.

Computer-Based Information Assurance Training

Virtually all federal information activity is controlled by software applications, which is either exposed to “Insider/Outsider Threats” or operating in an unpredictable environment. Information Assurance (IA) and application development personnel are required to have the skills and certifications to protect confidential information - and often seek a partner like Security Innovation that specializes in application security.  Our courses are scalable, cost-effective and have many benefits:

• rollout to hundreds or thousands in minutes

• gain expertise in secure software development, security testing, and information security

• earn CPE credits (helps IAT and IAM maintain their CISSP status)

• :: more>>

Vulnerability Analysis Products

Uncovering vulnerabilities for COTS and GOTS prior to deployment is not only a FISMA requirement, but one of the most critical security activities development and IT teams can conduct.  We offer products that can find problems in code as it's being built (static analysis) and the compiled application  (dynamic analysis)

• Checkmarx for next generation, accurate, cost-effective source code scanning

• Holodeck to see how your application exposes itself in hostile environments

• :: more>>

Application Security Assessments

• uncover deep, elusive vulnerabilities that expose your information to outside attacks

• can be conducted on source code or compiled applications

• understand the information risk your software application pose

• :: more>>