Information Systems Security


EES supports government-wide security efforts through a holistic approach that prioritizes security actions based on risk management. By using risk management as the guiding framework, security efforts are focused on the areas having the most impact on protecting mission-critical systems and data. Our approach focuses both on maintaining security compliance and conducting a risk-based form of continuous monitoring to detect and close vulnerabilities before an incident or breach occurs. This dual focus and parallel approach provides our clients with a method to protect systems and data, meet compliance requirements, lower risk, and reduce costs by using risk management to focus limited security resources in the areas having the most impact.

Domain Support Areas:

  • Access Control
  • Telecommunications and Network Security
  • Governance and Risk Management
  • Software Development Security
  • Cryptography
  • Architecture and Design
  • Operations Security
  • Business Continuity and Disaster Recovery Planning
  • Legal, Regulations, Investigations and Compliance
  • Physical (Environmental) Security