SBIR-STTR Award

Traditional approaches to risk reduction that focus exclusively on threats, vulnerabilities, and consequences of exposure may not be ideally suited to assess complex and highly connected systems critical to the successful completion of mission objectives. G2 Ops envisions a multi-disciplinary approach towards defining a quantitative resiliency solution. Utilizing Model Based System Engineering to capture cyber requirements and the lifecycle of an information system provides significant time savings in the creation of the artifacts required to satisfy the RMF process. The integration of testing results (ACAS Scans, STIG outputs) into the model provides a centralized repository that both engineers and cyber analysts can utilize ensuring the two teams are looking at the same data. The G2 Ops Baseline Management solution provides rapid analysis for engineering changes and ensures that security requirements are met. This process also provides the updated documentation required to be entered into eMASS along with any testing requirements that need to be conducted prior to implementation. The utilization of this process ensures that the system continues to meet security requirements throughout its life and decreases the effort to reaccredit the system utilizing the RMF process.

Traditional approaches to risk reduction that focus exclusively on threats, vulnerabilities, and consequences of exposure may not be ideally suited to manage the cybersecurity lifecycle of complex and highly connected systems critical to the successful completion of mission objectives. G2 Ops envisions a multi-disciplinary approach towards defining a quantitative cyber resiliency solution. Utilizing Model Based System Engineering to capture cyber requirements and the lifecycle of an information system provides significant time savings in the execution of the ongoing analyses and creation of cybersecurity artifacts. The G2 Ops Embedded Cyber Resiliency solution integrates traditionally separate systems and security engineering activities, providing for the rapid analysis for system designs, engineering baselines, and proposed system changes throughout the system lifecycle. The utilization of this process ensures that the system continues to meet security, operability, and reliability requirements throughout its life and significantly decreases the effort to maintain cybersecurity system authorizations.