GOVERNMENT BUSINESS

Veteran-Owned Startup Awarded Multi-Year Federal Task Order for Cybersecurity

Aquia Inc | January 04, 2022

Federal Task Order
Aquia Inc., a Service-Disabled Veteran-Owned Small Business specializing in cloud and cybersecurity professional services, announced today that it has joined the RevaComm team on a five-year contract with Government Services Administration (GSA) supporting the Centers for Medicare and Medicaid Services (CMS) for the Office of Information Technology's Continuous Authorization and Verification Engine (batCAVE) initiative.

CMS is the largest agency in the federal government by expenditure and is responsible for the personally identifiable and personal health information for more than 177 million people.

In partnership with RevaComm, Aquia will develop and lead the following programs for CMS:
  • Platform Security: Aquia is responsible for security engineering and architecture in support of batCAVE Platform-as-a-Service (PaaS) development, including guardrail development & integration, Continuous Integration/Continuous Deployment (CI/CD) & pipeline security, and development of DevSecOps tooling & automation. These efforts will help to shift security left and ensure the security and compliance of cloud-based application environments for CMS Application Development Organizations (ADO)'s.
  • Purple Team: Aquia will be providing joint offensive (Red) and defensive (Blue) cybersecurity capabilities, otherwise known as a Purple Team. This team will be focused on identifying, exploiting and remediating security vulnerabilities related to the batCAVE platform, ensuring a robust and resilient platform for CMS stakeholders.
  • Compliance Automation: Aquia will use innovative technology to support and foster a culture of Continuous Compliance and Governance with the goal of moving towards a Continuous Authority-to-Operate (cATO) for batCAVE platform.

David Maskeroni, Aquia's Chief Executive Officer, had this to say when discussing the batCAVE initiative, "This is a great opportunity to bring cloud-based application delivery to the Federal Civilian government, with security baked into the very heart of the initiative. We are very proud to be a critical member of this team."

About Aquia Inc.
Aquia Inc. is a Service-Disabled Veteran-Owned Small Business based in Millsboro, DE. Aquia is a developer-centric company founded in 2021 by military veterans with passion for the intersection of security/velocity and decades of experience driving transformational change across public sector, enterprise and top-tier technology companies. At Aquia, we value trust, accountability, transparency and diversity; and we've built these tenants into the DNA of our company.

Spotlight

Public agencies experience unique challenges that aren’t found in the private sector. Agencies have to comply with constitutional requirements, and usually do so on tighter budgets and with limited staff members. Our whitepaper explores the biggest challenges government teams are facing with eDiscovery.

Spotlight

Public agencies experience unique challenges that aren’t found in the private sector. Agencies have to comply with constitutional requirements, and usually do so on tighter budgets and with limited staff members. Our whitepaper explores the biggest challenges government teams are facing with eDiscovery.

Related News

GOVERNMENT BUSINESS

U.S. Department of Defense Selects Intermap to Showcase Advanced AI/ML

Intermap Technologies, Inc. | February 13, 2023

Intermap Technologies (Intermap), a leading 3D geospatial products and intelligence solutions provider, recently announced that it has been chosen by the United States Department of Defense to advance to the next stage of a competitive process to showcase advanced technology for Geospatial Temporal Incident Data. Intermap was invited to showcase its newest artificial intelligence processing technology and illustrate how it can help the U.S. government with actionable, geo-precise data for planning processes and situational awareness after its prior proposal was vetted and assessed. Human-caused events (population disturbances, crime, riots and protests, and cybersecurity advancements) and natural hazard occurrences are included in Geospatial Temporal Incident Data. At the Thunderstorm 23-1 event in April 2023, Intermap will exhibit its capabilities and demonstrate its advanced technology to the Department of Defense. Intermap's digital tool combines machine learning, artificial intelligence algorithms, natural language processing, proprietary, multi-sensor-derived terrain, global-scale, object, and feature catalogs, and open-source global data to track, identify, display, and notify interested parties of current international events, threats, and natural disasters. Its technology using ML/AI/NLP processing, analyses and precisely geolocates the danger level, categorizes each occurrence, calculates its footprint, and marks it on a map to enable actionable visualization for possible threats in a given region of interest. The generated information improves situational awareness and aids planning procedures by fusing, analyzing, and visualizing events and trends to present the U.S. Army with an enhanced common operation picture (COP). About Intermap Technologies, Inc. Intermap Technologies, founded in 1997, is a global pioneer in geospatial intelligence solutions, specializing in the generation and analysis of 3D terrain data to create high-resolution thematic models. The Company provides broad, complementary, multi-source datasets to clients through scientific analysis of geospatial information, processing technologies and proprietary sensors, allowing them to incorporate geospatial intelligence into their workflows effortlessly. Through machine learning and artificial intelligence, Intermap's 3D elevation data and software analytic capabilities enable worldwide geospatial analysis, providing companies with crucial information to understand their terrain environment.

Read More

EMERGING TECHNOLOGY

Finvi Earns ATO at Moderate Impact Level under FedRAMP

Finvi | February 28, 2023

One of the leading enterprise workflow automation software providers, Finvi, is built to accelerate revenue recovery and simplify the payment process, recently announced that it has been awarded the Authorization to Operate (ATO) by the Federal Risk and Authorization Management Program (FedRAMP) at the Moderate Impact level. The FedRAMP is a government-wide program that encourages using secure cloud services across the federal government by establishing a uniform methodology for assessing the security and risk associated with cloud computing for federal agencies. Finvi can bring its 40+ years of experience and innovation to the federal level, allowing federal agencies to enjoy the same advantages as their state and local counterparts. However, to get FedRAMP approval, Finvi's cloud services must be looked at more than once by a federal agency partner and an independent third-party assessment organization (3PAO). These tests and reviews aimed to regulate if Finvi's cloud offerings meet the strict security standards required to work with federal agencies. Finvi, after the authorization, is recognized as Ontario Cloud Federal (OCF) in the collection of Cloud Service Providers (CSP) available on the FedRAMP Marketplace. As featured in the Marketplace, Finvi's distinctive software-as-a-service cloud-based offering for healthcare revenue and accounts receivables management comprises contact management and payment processing solutions designed to facilitate debt collection, collections and receivables, payments, reporting and information services, customer service, as well as software system development. About Fenvi Founded in 1980, Finvi is the leading enterprise technologies provider that simplifies and accelerates client revenue recovery through government, healthcare, accounts receivable management, and financial institutions. Its ground-breaking solutions are built on a unique human-centric approach to innovate and deliver. As a result, it enables millions of clients to generate more revenue at a lower cost and achieve their business objectives through compliance-minded communication, payment tools, and automated and modern processes.

Read More

EMERGING TECHNOLOGY, CYBERSECURITY

Skyhigh Security Completes IRAP Assessment for SSE Portfolio to PROTECTED Level

Skyhigh Security | February 27, 2023

Skyhigh Security, a cloud-native security solutions provider, recently announced its Skyhigh Security Edge (SSE) portfolio completed the Australian Information Security Registered Assessors Program (IRAP) assessment to the PROTECTED security classification level. Skyhigh Security's momentum in the federal government is continued with new assessments following its previous completed assessment in 2020, where Skyhigh Cloud Access Security Broker (CASB) has been evaluated as PROTECTED. The IRAP assessment assures public sector organizations that Skyhigh Security's robust suite of data-aware cloud security technology is equipped with adequate security controls to manage highly sensitive data and the infrastructures of Australian government agencies. The Australian Signals Directorate (ASD) led initiative IRAP provides high-quality information and communications technology (ICT) security assessment services to the Australian federal government. The IRAP assessment procedure is documented in the Australian Government Information Security Manual (ISM), which offers cybersecurity guidance and standards to protect vital information and systems of Australian government organizations. In addition, Skyhigh SSE has the appropriate controls in place to meet the security objectives defined by the Australian Cybersecurity Centre's (ACSC) Cloud Security Assessment and Authorisation Framework. Skyhigh Security benefited from IRAP in the Australian marketplace by demonstrating the company's commitment to security and a readiness to undergo independent assessments of its data-aware SSE technology. This assessment lets government agencies develop digital transformation initiatives and deliver improved citizen outcomes with confidence, utilizing powerful cloud capabilities delivered from Australian data centers. The Skyhigh SSE portfolio has also been evaluated by the Federal Risk and Authorization Management Program (FedRAMP). This U.S. government program evaluates cloud security vendors using a standardized security framework for cloud products and services. About Skyhigh Security Skyhigh Security, headquartered in San Jose, California, is a leading provider of cloud-native security solutions that are user-friendly and data-conscious. Skyhigh Security's cloud-native security solutions are designed to meet the evolving needs of modern organizations, ensuring that they are always protected against the latest threats. The company's expert security professionals work closely with clients to understand their unique requirements and provide tailored solutions that meet their specific needs, helping them stay ahead of the curve in an ever-changing threat landscape. In addition, with its innovative Security Service Edge (SSE) Portfolio, Skyhigh Security offers comprehensive security services that extend beyond data access and prioritize secure data utilization.

Read More