Creation / Maintenance of Security Documentation
Streamline your cybersecurity programs with our Comprehensive Creation and Maintenance of Security Documentation Services
Enterprise Services Center's (ESC) Creation/Maintenance of Security Documentation services offer System Owners a complete solution to the complex task of creating and/or updating the security documentation required for a federal system to meet Federal standards such as National Institute of Standards and Technology (NIST) SP 800-53. Our team of cybersecurity experts provides comprehensive assistance, including consultation and hands-on support for creating and updating system security documentation. ESC works closely with System Owners to understand and align documentation to their unique posture as accurately as possible in advance of any security control assessment or System Security Plans (SSPs) . The following outlines the documentation available as part of the ESC Creation/Maintenance of Security Documentation services:
- System Security Plans (SSP)
- Audit log monitoring procedures
- Account Management Plans (AMP)
- Configuration Management Plans (CMP)
- Incident Response Plans (IRP)
- Media Handling Procedures
- Architectural Diagrams
Note: These services can be used by agencies to aid them in transitioning from a legacy NIST SP 800-53 revision to the latest revision.
Eligibility
Federal civilian agencies are eligible to use these cybersecurity services from the DOT Enterprise Services Center (ESC). Department of Defense (DOD) organizations may be eligible for ESC cybersecurity services if their systems are unclassified.
Interested in this Fed-to-Fed service? Get a quote!
To get started, reach out to the ESC team. We will send you a simple questionnaire to fill out. Return the completed questionnaire to us and we will promptly develop a firm fixed-price quote, to include proposed schedules. If you just need a rough order of magnitude (ROM) estimate for budget planning purposes, just let us know.
Contact ESC at CyberServices@esc.gov to get more information and assistance.