ICFSecurePMO

The ICFSecurePMOSM is a flexible framework that allows security, business, and program management experts to deliver an integrated and customized solution that reduces potential risks to clients. This solution is based on ICF’s in-depth experience delivering program management, information management, and security solutions for state, federal, and commercial clients. The result is a secure and flexible program management office (PMO) solution that: Creates a comprehensive, consistent, and secure approach to deploying and managing a PMO Leverages ICF’s proven PMO methodology and management tools Integrates PMI-based concepts, ISO 27000, federal, U.S Department of Defense (DoD), privacy, and compliance best practices and frameworks Leverages our world-class and certified security, business, and program management experts

ICF's Jim Stanton Elected to NERC Standards Committee $2.5 Million Contract to Support TSA's Registered Traveler Program Ellen Glover Hired to Head IT, Program Management, and Human Capital Businesses NERC/CIP Cyber Security Protecting Privacy in Public Private Partnerships: What Government Agencies Should Know ICFSecurePMO Fact Sheet Information Security and Privacy Solutions NERC Reliability Standards Compliance Services Performance-based Program Management Technology Solutions for NERC Reliability Standards Compliance

ICFSecurePMO Delivers Results

When failure is not an option, ICF leverages its information security, privacy, and project management experts to tailor a complete solution for your program needs that is focused on delivering results. Our solution leverages the strengths of program management principles with the expertise in information security and privacy.

Capabilities in the ICFSecurePMO toolkit include:

• Certified resources—ICF employees hold several professional certifications, such as:

  - Project Management Professional (PMP)
  - Certified Information Systems Security Professional (CISSP)
  - Certified Information Security Manager (CISM)
  - International Organization of Standardization (ISO) 27001: 2005 Information Security Management Systems Auditor
  - Certified Information Privacy Professional (CIPP)
  - Certified Information Systems Auditor (CISA)

• Federal security standards and policy expertise in the Federal Information Security Management Act (FISMA), the Clinger-Cohen Act, the Privacy Act, and the North American Electric Reliability Corporation (NERC) Standards
  
  
• Technology resources and expertise in data encryption email encryption, security solutions, MS Office applications, and collaboration portals such as MS SharePoint
  
  
• Business Management tools and techniques to streamline workflow management, business process analysis, and program and project management methodologies

ICFSecurePMO is powered by four core components while enabled by sound program and project management concepts and techniques:

1) Standards and Policies
As technology changes and focus on information security and privacy grows, it is imperative to understand and rapidly adapt to new standards and policies.

2) Technology
Smart use of technology enables effective management as well as coordination and collaboration with program stakeholders.

3) People
Information security and privacy are not just the responsibility of the IT department—all program stakeholders participate in the ICFSecurePMO.

4) Security Best Practices
Proven and repeated best practices deliver on the ICFSecurePMO capability.

Selected Projects

Transportation Security Administration (TSA) Registered Traveler
ICF developed a customized PMO, information security, and privacy solution for TSA that enabled faster security checkpoint throughput for registered travelers at 17 U.S. airports. For more information, review the TSA Security, Privacy, and Compliance Standards.

Regulated Public Electric Utility
ICF improved cross-organizational collaboration for implementing NERC’s Critical Infrastructure Protection Cyber Security Standards and senior-level visibility into ongoing compliance efforts by establish a PMO solution that securely managed multiple projects and protected sensitive corporate information to meet strict compliance deadlines.