Defense Distribution Center (DDC)

Challenge

When DDC — one of the Department of Defense’s largest combat logistics support agencies — tasked us to support its Information Assurance program, the organization was experiencing tremendous growth in its worldwide IT infrastructure. With this growth came two major questions: First, how could DDC best secure its infrastructure assets and meet certification and accreditation (C&A) deadlines for approximately 30 major networks and applications? Second, with compliance metrics becoming increasingly technical in nature, how should DDC ensure that current vulnerabilities were analyzed, managed, and corrected quickly?

Solution

Veris Group responded to these challenges by surveying the current C&A status of all DDC networks and applications, and then strategically identifying where resources were needed most. To address the geographically dispersed nature of DDC’s infrastructure and current levels of compliance, we carefully assembled a team of technically and analytically-proficient security professionals, who were certified, cleared, and able to travel worldwide on short notice.

Due to our flexibility, experience, and customized solution, we were able to quickly implement a project plan, conduct multiple security assessments, develop security documentation, and assist IT personnel in implementing technical solutions to address enterprise-wide deficiencies.

Results

Today, DDC is quickly turning temporary interim authorizations to operate (IATOs) into full ATOs, thereby strengthening its security posture and FISMA compliance program. As a result of Veris Group’s efforts, a comprehensive C&A and vulnerability management process has been documented and implemented. This success in turn is enabling the organization to make a smoother transition to the new DIACAP security C&A methodology.