Certification & Accreditation of information

systems

The Defense Security Service's Office of the Designated

Approving Authority (ODAA) accredits information systems

(computers) for the processing of classified information in accordance with

the National Industrial Security Program Operating Manual (NISPOM). A

company seeking to gain accreditation of one of its computers or networks

for that purpose must create a System Security Plan (SSP) for that

information system, certify that the information system is configured and

operating according to those specifications, and submit the System Security

Plan to DSS' ODAA for accreditation. The specifics of the System Security

Plan are customized to the particular information system (e.g. standalone or

networked, its classification level), whether it is to be a multi-user or single-

user system, the NISPOM protection level involved, the physical security

measures used, etc.

Because the DSS' ODAA certification and accreditation process for

automated information systems is more involved than most other NISPOM-

related procedures, companies often seek our help with the process. We can

assist with completion of the required documentation and establishing the

security procedures to gain and maintain accreditation. Please contact us to

discuss the specifics of your situation and concerns.

< Back to list of Services