The Rhines Company
Teach participates to do the following: Develop and maintain Assessment and Authorization (A&A) documentation including System Security Plan (SSP), Continuous Monitoring Strategy, Risk Assessment Reports (RAR), and Plan of Action and Milestones (POA&M), to support certification of compliance to applicable standards including DIACAP, RMF and DCID 6/9. Maintain and support current and ongoing Assessment and Authorization (A&A) packages. Implement and support cyber security standards to include NIST and Risk Management Framework (RMF) A&A Standards. Work with systems owners, Government managers, and other stakeholders to manage Cybersecurity requirements. Perform regular systems security scans, and maintain records of such scans, as required by A&A guidelines. Respond to Information Assurance Vulnerability Alerts (IAVAs) as necessary to address systems vulnerabilities. Review systems security utilization logs per cyber security standards. Review and evaluate information technology software, hardware and networks and the overall cyber security posture of information technology systems. Provide recommendations for security improvements based on advances in industry or in response to threat intelligence. Review and analyze vulnerability scans, and collaborate with system administrators to mitigate and remediate. Participate in the change management process, including conducting security impact analyses. Review Security Technical Information Guide (STIG) changes and update STIG checklists accordingly. Monitor Host Based Security System (HBSS) events. Review audit logs for suspicious activity.