top of page

Cybersecurity & Privacy

When we provide engineering and architecture recommendations for enterprise security technologies and principles such as Zero Trust, CDM, cloud, dashboards, risk management, threat intelligence, wireless, mobile, phishing training and more -- our clients take notice. 

Cybersecurity & Privacy.png
More on how we're
Innovating for Change
with Cybersecurity & Privacy:

Cyber Capabilities

Cloud Migration and Security

Continuous Diagnostics & Mitigation (CDM) Support

Cybersecurity PMO w/ Governance and Compliance

Information System Security Officer (ISSO) and Security Assessment and Authorization (SA&A) Support

Risk Management

Security Operations

Security Program Management Office support

Secure Systems Development

Security Training & Awareness

Technical and Operational Cybersecurity

Privacy Capabilities

Privacy policy creation & governance support

Privacy program assessments & remediation strategies

Privacy operations including System of Records Notices (SORN), PTA, and PIA management and privacy incident response

Personally Identifiable Information (PII) protection strategies

Data loss prevention program and tools implementation

Evaluation of security controls for the protection of PII

Design and implementation of PII reduction plans

Privacy training and awareness

Multi-faceted Support for HHS

CSS Federal has provided a multitude of comprehensive ISSO training and/or support to 20+ systems within HHS since 2017, including systems categorized as High Value Assets (HVA). We implemented industry-leading risk management frameworks, information assurance support services, and a vulnerability management program in addition to updating and maintaining pertinent security best practices and strategies.

Risk Management & Remediation for CMS

In support of the CMS Financial Management Systems Group (FMSG), CSS Federal provided meticulous execution and risk management processes involving a SIEM solution. As a result, the Healthcare Integrated General Ledger Accounting System (HIGLAS), which accounts for over $1.2 trillion annually, successfully went live within 6 months, reduced nightly batch run-time by 50%, increased scalability by 20% while maintaining stable environments, which ultimately resulted in allowing HIGLAS to be the 1st Government Agency to upgrade to Oracle Federal Financials 12.2.7 and becoming legislatively mandated DATA Act compliant from Day One. HIGLAS also secured “Certificate of Appreciation” from Department of Health and Human Services for remediating a 20-year-old outstanding material weakness because of the innovative efforts.

Security Services & Testing for EXIM

In support of multiple EXIM IT systems, CSS Federal provides IT security support and documentation services for the Bank’s on-premises and cloud-hosted IT systems – on-premises systems currently include two General Support Systems (GSS) (Infrastructure and Oracle) and three applications (EXIM Online, Application Processing System, and the Financial Management System). CSS Federal also provides IT security testing, including external penetration tests, internal vulnerability assessments, web application security tests, social engineering (phishing) attack tests, and security incident response and disaster recovery tests.

bottom of page