Cybersecurity & Engineering Services (NAICS 541519)

Other Relevant NAICS codes: 541330, 541511, 541512, 541513, 541611, 541690, 561210, 611420

Previous Next

Our Services

Assessment and Authorization (A&A) and Governance, Risk & Compliance (GRC)
Operations & Monitoring
Data Protection & Privacy
Incident Response & Recovery
Network & Security Engineering & Architecture

Assessment & Authorization (A&A) & Governance, Risk & Compliance

System security plans and system categorization
A&A package preparation and submission
ATO support and sustainment
Plans of Action & Milestones (POA&Ms)
Risk assessment, policies and procedures
Regulatory compliance (FISMA, NIST SP 800-37, 800-53, 800-137)
ISSO support, audit readiness and GRC tools

Operations & Monitoring

Vulnerability management, EDR
SOC support, Splunk
Patch and configuration management
RMF control support
Firewall and WAF administration
Red team testing support

Data Protection & Privacy

Privacy Impact Assessments (PIAs)
Data mapping and flow analysis
Data classification and handling policies

Incident Response & Recovery

Identification: Detection; Incident response; Tabletop exercises
Containment: Isolation; Configuration changes; Strategic planning
Eradication: Root Cause Analyses (RCAs); Malware removal; Patching & hardening
Recovery: System restoration; Validation and testing; User communications

Network & Security Engineering & Architecture

Network design and planning; IP address management
Firewall and perimeter security design
Remote access architecture (VPNs, secure connectivity)
Load balancing and redundancy
Cloud network architecture and premises integration
Identity and Access Management (IAM); MFA; Zero Trust Architecture
SIEM and log architecture
IDS/IPS

Where we do this

InfoStructures supports RMF assessment and authorization for a federal customer, and provides security engineering to its Security Operations Center, covering firewalls, web application firewalls, SIEM and endpoint protection.

CMMC Level 2: In progress.

Results for our customers

Modernizing Remote Access and Web Protection Without Disruption
For a federal customer with more than 300 public websites and locations in the United States and abroad, InfoStructures cybersecurity engineering staff serve as primary administrators for its web application firewalls, enterprise firewalls, remote-access VPN and public certificates. In two years, our engineering staff replaced the agency’s legacy remote-access VPN with a new platform tied to Active Directory groups, so each user reaches only the network segments their role requires. Our staff worked with the customer’s security team to require multifactor authentication on all Tier 1 servers, added denial-of-service and bot protection that measurably cut network and server load, and moved every remaining public website behind a web application firewall. They also migrated hundreds of public certificates to a new provider and re-architected a business unit’s network so an aging firewall could be retired. All of it was delivered while keeping websites and remote access available to employees and the public.