SMALL BUSINESS SHOWCASE

1
SMALL BUSINESS SHOWCASE

• COACT, Inc. is a Service Disabled Veteran Owned
  Small Business (SDVOSB).
• Niche Areas Certification Accreditation (CA)
• FIPS140 Cryptographic Modules Testing
• Security Content Automation Protocol (SCAP)
  Testing
• Personal Identity Verification (PIV) Testing
• CA Training Classes
• Common Criteria
• Intrusion Detection
• Security Test and Evaluation (STE)
• IRS/Treasury contracts
• IRS/CPO (5.6 Million Dollars)
• Department of Treasury/OCC (4 Million Dollars)
• Dollar amount of Largest Company award
• Missile Defense Agency (6.5 Million Dollars)

2
SMALL BUSINESS SHOWCASE

• Brief History
• COACT, Inc. is a Service Disabled Veteran Owned
  Small Business (SDVOSB).
• After 24 years of service at the National
  Security Agency, and two years at Ford Aerospace
  Corporation, James McGehee founded COACT, Inc. in
  1990.
• COACT, Inc. was initially a one man consulting
  firm and has grown exponentially.
• Since 1990, COACT has evolved into a leading
  provider of security compliance solutions and
  services.
• Located in Maryland just off Route 32 West. The
  facility has 12,000 square feet of
  office/conference/lab space.
• COACT Employees hold security clearances ranging
  from Secret to TSSI.

3
SMALL BUSINESS SHOWCASE

• Corporate Capabilities
• COACT, Inc. has developed into a leading provider
  in the following areas
• Certification Accreditation (CA)
• Common Criteria Evaluations
• Cryptographic Module Testing
• Independent Verification and Validation (IVV)
• Security Test and Evaluation (STE)
• Intrusion Detection
• Vulnerability Analysis
• Security Product Evaluations

4
SMALL BUSINESS SHOWCASE

• Past Performance
• Both CA and Common Criteria including such
  customers as

• IRS
• US Treasury/OCC
• US Treasury/FMS
• National Security Agency
• US Department of Agriculture
• US Customs
• Missile Defense Agency
• Federal Highway Administration
• Federal Aviation Administration
• Department of Transportation
• IBM
• Boeing
• Hewlett Packard
• McAfee, Inc.
• Canon
• BAE Systems

5
SMALL BUSINESS SHOWCASE

• North American Industry Classification System
  (NAICS)
• 541690 Security Consulting Services
• 541380 Testing Laboratories
• 541330 Engineering Services

6
SMALL BUSINESS SHOWCASE

• Other Corporate Attributes
• GSA Schedule (Schedule 70)
• ISO 9001 2000 Registered
• Service Disabled Veteran Owned Small Business
• Cleared Personnel
• 19 Years in Business
• No Long Term Debt
• Employees are certified in the following areas
• CISM, CISSP, SSCP

7
SMALL BUSINESS SHOWCASE

• Other Corporate Attributes - continued
• Security Content Automation Protocol (SCAP)
  Testing
• Personal Identity Verification (PIV) Testing
• FIPS140 Cryptographic Modules Testing
• Accredited Laboratories for Common Criteria
• Common Criteria Testing Laboratory (CCTL)
• Labs accredited through the National Institute of
  Standards and Technology (NIST)

8
SMALL BUSINESS SHOWCASE

• Common Criteria Testing Laboratory
• The COACT, Inc. CAFÉ Lab is a government
  evaluation and test facility accredited by the
  National Volunteer Laboratory Accreditation
  Program (NVLAP) under lab code 200416.0.
• Since 1999, the COACT CAFÉ Lab has been an
  independent Common Criteria Test Laboratory
  (CCTL).
• The CAFÉ Lab CCTL is overseen by the National
  Information Assurance Partnership (NIAP) Common
  Criteria Evaluation and Validation Scheme (CCEVS)
  Validation Body.

9
SMALL BUSINESS SHOWCASE

• Common Criteria Testing Laboratory - continued
• The CAFÉ Lab has evaluated numerous and diverse
  product types including switches, web servers,
  networked data storage devices, databases,
  firewalls, VPNS, secure wireless devices, and
  intrusion detection/protection systems ranging
  from Evaluation Assurance Level 1 (EAL1) through
  Evaluation Assurance Level 7 (EAL7).
• The COACT, Inc. CCTL is credited with being the
  first and only U.S. CCTL to perform an EAL7
  evaluation.

10
SMALL BUSINESS SHOWCASE

• Contract Support
• COACT, Inc. is currently supporting the
  Certification Program Office (CPO) by performing
  System Accreditations for FISMA FY09 reports.
• In addition, COACT is providing support to the
  CPO through impact analysis of NIST 800 Series
  documentation updates on the existing IRS CA
  process, maintenance of templates, review of
  policies and procedures, and support of the FISMA
  realignment and FDCC initiatives.
• COACT is also supporting the IRS in their
  Enterprise Continuous Monitoring (eCM) efforts
  conducting reviews and analysis of IRS Business
  Unit testing efforts to ensure the appropriate
  security controls are tested and that the testing
  is documented in accordance with established IRS
  eCM processes and procedures.