Cybersecurity + Identity Management

Capabilities

• Information assurance and privacy solutions—ICF excels at providing effective security authorization solutions, traditionally referred to as certification and accreditation, driven by an integrated approach of risk management, enterprise architecture, information security, and portfolio management. As each agency continues to adhere to an increasing number of security controls (NIST SP 800-53, rev 3) and adopt a strategy of continuous monitoring (NIST SP 800-37, Rev 1), ICF strives to transcend compliance and improve the security posture of each client.
• IT governance and risk management—ICF assists U.S. federal agencies in developing, implementing, and maintaining an information technology governance framework by leveraging a risk and portfolio management approach to IT. Understanding technology and program risk and the dependencies between both are a fundamental aspect of IT governance. Our strategic approach combines a solid grasp of IT, information security, and program management and is utilized to identify and mitigate risk at all levels, improve processes, and increase value. 
• Critical infrastructure protection (CIP)—ICF offers a broad-range of NERC CIP advisory and assessment services to key and senior-level personnel on compliance, implementation, and management for protection of generation and transmission of critical cyber assets. By working with clients to establish a culture of compliance and auditable security controls embedded throughout the organization, ICF helps to minimize and mitigate compliance risks and program inefficiencies. ICF also possesses the deep technical understanding and expertise necessary to provide services such as vulnerability assessments and configuration reviews.
• Identity, Credentialing, and Access Management (ICAM)— ICF is a leading provider of services to U.S. federal agencies implementing the requirements of Homeland Security Presidential Directive 12 (HSPD-12). ICF specializes in identity management, a critical component of the strategy to protect U.S. networks as outlined in the President’s 2009 Cyberspace Policy Review. ICF provides solutions that authenticate an individual’s identity—a fundamental component to control access to security-sensitive networks, classified information, infrastructure, and facilities. Identity management and credentialing requires a deep understanding of Public Key Infrastructure (PKI), Physical and Logical Access Control Systems (PACS and LACS), smart card technology, and federal standards for identity management such as Federal Information Processing Standards (FIPS)-201 and Personal Identity Verification (PIV) of federal employees and contractors.
• Network management and intrusion detection—ICF provides the highest level of cybersecurity solutions to protect critical information supporting our clients’ strategic missions in classified and unclassified environments. We research and develop software tools that detect sophisticated attack methods and unknown network intrusions before such threats are recognized or reported. ICF's tools have been recognized for their success in detecting new threats, and these tools continue to be globally deployed throughout the U.S. Department of Defense (DoD). Our capabilities and decades of experience defending and protecting DoD networks allow for quick response to the cybersecurity and critical information protection needs of other federal agencies and commercial organizations.

Projects

• 

  NERC CIP Assessment and Implementation Services

  ICF evaluated and assessed the security management, physical, personnel, incident reporting, recovery planning, and technical security controls in various U.S. areas, including a northeast region regional transmission organization (RTO) as well as utility North American Electric Reliability Council (NERC) critical infrastructure protection (CIP) programs in the Southeast.

• 

  Personnel Access and Security Program

  ICF supports the U.S. Environmental Protection Agency (EPA) with its deployment of the EPA Personnel Access and Security System (EPASS), one of the most successful PIV card issuance programs of any federal entity. More than 20,000 employees and contractors have been issued HSPD-12 compliant credentials at more than 100 EPA sites nationwide.

• 

  NERC CIP Program Development

  ICF developed an enterprise-wide North American Electric Reliability Council (NERC) critical infrastructure protection (CIP) program, policy, and implementation plan for a Northeastern independent power producer based on comprehensive physical, cyber, and personnel threats; vulnerability; and consequence impact assessment.

• 

  Yahoo! Carbon Neutrality Program

  ICF assisted in developing Yahoo!’s worldwide carbon neutrality program by completing a comprehensive greenhouse gas inventory, including electricity and fuel use associated with Yahoo!’s office buildings and datacenters as well as business travel and employee commuting. ICF identified opportunities to reduce Yahoo!’s carbon footprint through a benchmarking study of the company’s core facilities, allowing Yahoo! to consider energy-efficient options and on-site renewable generation, including solar services.

• 

  Identity Management and Credentialing

  ICF supports the design, implementation, and rollout of the U.S. Social Security Administration’s (SSA) HSPD-12 program. Since 2004, ICF has supported SSA's effort to design a credential enrollment and issuance system that could be widely deployed. This effort led to an economical solution used at SSA's 1,600 sites nationwide.

Experts

• Jason Pakes

  Principal

• Eric Cardwell

  Principal

• Greg Frank

  Vice President

• Bill Jacob

  Senior Vice President