Week 1 Assignment 1

My firm is a security service provider that started with only 4 employees in 2002 that services mostly state and federal agencies of various sizes. The firm’s annual gross sales are currently at 1.6 million U.S. dollars. When our firm first started, we focused on database performance tuning and security services for database applications. 4 years later, our firm improved to provide complete security services such as, penetration testing, policy creation, regulatory compliance assistance and assessments. Currently our firm looks to operate in a more secure manner by addressing security related issues of government and mid-sized organizations. We currently have our headquarters and only office in a different state from the RFP state. We are now up to 22 full-time employees. 8 Employees that will be working on the new prospective products and services are certified professionals. 5 have a CISSP certifications, 4 hold a CISM certification, 4 hold a GIAC and GSEC certifications and 6 hold other GIAC certifications. We have won four major contracts in the last four years for vulnerability assessments and penetration tests. We do not offer source code review to assess security and do not employ development security specialists.

Positive Gaps:

• Been in business for 5 consecutive years

• Reported annual gross sales of more than one million dollars

• Presented 4 references in last four years similar to requirements of this document.

• Have four people who have a CISSP and CISM certifications.

Negative Gaps:

• Do not have a permanent office in the state.

• Currently have managed security service provider contract with an agency in the state.

• Cannot provide previous reports for other clients of source code to assess its security and do not employ developmental security specialists.