JDBiggs & Associates is an Information Security and Privacy consulting firm located near Washington, DC in suburban Maryland, focusing on providing clients with expertise in the following four critical areas of an enterprise security program:  (1) Enterprise Security Architecture, (2) Certification & Accreditation of systems, (3) Risk Assessments, (4) Security Education Training Awareness.

Performing services in these four critical areas, JDBiggs & Associates is able to enhance the enterprise IT security, protecting the data from unauthorized access and unauthorized modification while making it available to authorized users.  Our consulting staff has extensive subject-matter-experience in certification & accreditation, risk management, risk assessments, vulnerability & penetration testing, contingency planning, development of security plans, evaluation of security controls, and policy development.  These information technology security specialists perform their services in accordance with the following guidance and standards:

Federal Information Security Management Act (FISMA)

• Federal Information Processing Standards (FIPS)
• National Institute of Standards and Technology (NIST) Special Publications
• ISO/IEC 17799:2000 Code of Practice for Information Security Management
• Director of Central Intelligence Directives (DCIDS)
• Health Insurance Portability and Accountability Act (HIPAA)

Our cumulative experience in developing Security Education Training Awareness (SETA) programs follows the Federal Information System Security Educators Association (FISSEA) approach and NIST SP 800-50.  In addition, we develop and evaluate Enterprise Business Continuity & Disaster Recovery programs following the Disaster Recovery Institute International (DRII) methodology, and NIST special publications. 

Lastly, our consulting staff is experienced professionals in security & privacy, and brings to our clients in commercial and government organizations skills necessary to achieve successful enterprise security programs.  Several of our consultants hold industry certifications as Certified Information System Security Professional (CISSP), Certified Information Security Auditor (CISA), Certified Information Security Manager (CISM), and Certified Business Continuity Professional (CBCP), and have completed assignments in financial & insurance institutions and across government organizations.

Please contact us for additional information on how we can assist your organization.