ABOUT TECHNOLOGIES SYSTEMS & PLATFORMS PRODUCTS INVESTORS CAREERS PODCAST Home About Divisions Space, Training, and Cybersecurity Cyber Minimize Risk, Maximize Peace of Mind with Kratos Cybersecurity Services Overview Compliance Services CMMC Governance, Risk Management & Strategy Operations, Defense & Engineering Contact Us DoD Releases CMMC 2.0, Significantly Changes Compliance Framework…See How It Affects You Changes affect the framework, assessments, POA&Ms, waivers, and contracts. As an authorized C3PAO, Kratos can guide you through the changes and ease your path to CMMC Compliance. Read our CMMC 2.0 factsheet. Over the past twenty-five years Kratos has helped organizations achieve and maintain their security objectives by deploying the necessary services to resolve all your cybersecurity and compliance-related needs, including CMMC services, in a timely and cost-effective manner. Learn more about Kratos’ range of cybersecurity services. Learn more about Kratos’ range of cybersecurity services. Compliance Services In addition to being named a C3PAO, Kratos has years of robust compliance and certification experience with government and commercial standards and compliance frameworks requirements. Kratos is one of the first and largest Federal Risk and Authorization Management Program (FedRAMP) Third Party Assessment Organizations (3PAO). Kratos’ compliance experience also includes Payment Card Industry (PCI), Federal Information Security Management Act (FISMA) and the National Institute of Standards & Technology (NIST)/Risk Management Framework (RMF). Kratos is viewed as a trusted compliance and governance partner by the DoD, Federal Civilian Agencies, Intelligence Community (IC), and commercial organizations. KRATOS CMMC SERVICES As an authorized C3PAO Kratos is prepared to offer Advisory or Assessment services. The latter include scoping analysis, readiness assessments and penetration testing among others. Advisory services include gap analysis, documentation and process and engineering consulting services. Learn More FEDRAMP ASSESSMENT & ADVISORY SERVICES Assess Cloud Service Provider (CSP)’s compliance against all FedRAMP requirements at all baselines (Low, Moderate and High.) We also help CSPs prepare for and manage a FedRAMP assessment. Everything, from building the entire FedRAMP documentation package to managing the required monthly Plan of Action and Milestones (POA&Ms), uses automated tools. Learn More CLOUD SECURITY Kratos risk analysis helps government agencies understand the risks around cloud services and the consequences a data loss or other security event could have on an organization. It also helps agencies better understand the FedRAMP requirements and ensure that the process is being followed effectively. Learn More NIST/RMF Help federal organizations improve information security and strengthen risk management processes based on the NIST/RMF framework. Kratos helps federal agencies implement true cybersecurity risk management by leveraging the NIST/RMF framework, along with expertise in cybersecurity testing and continuous monitoring. Learn More CONSOLIDATED SERVICES Kratos leverages FedRAMP compliance to combine the redundant controls, interviews, and meetings already performed during a FedRAMP assessment with one or more of the below compliance models: DoD Cloud Computing Security Requirements Guide (SRG) – All Impact Levels CMMC PCI ISO 27001 NIST 800-171 (DFARS) HIPAA SOC 2 CJIS Governance, Risk Management, & Strategy Kratos serves as a trusted advisor, supporting commercial companies and agencies through a full life cycle of system design, control implementation, and risk management processes. Kratos’ services include: CLOUD SECURITY STRATEGY Develop an enterprise cloud security strategy to establish oversight and risk management. Kratos’ cloud experts can help develop a high-level security strategy road map so an organization can successfully achieve its cloud security needs. Learn More SECURITY PROGRAM MANAGEMENT Support the development and operation of proactive cybersecurity programs. Based on experience from hundreds of customer engagements, Kratos’ experts design a continuous assessment and monitoring program aligned with an organization’s strategy and industry best practices. Learn More POLICY & PROCEDURE DEVELOPMENT & MANAGEMENT Establish policies reflect security goals, meet compliance requirements, and provide on-going management. Kratos experts will review existing policies, identify gaps, and fill those holes so that documentation is relevant, understandable, and in alignment with organizational and regulatory goals. Learn More ENTERPRISE SECURITY ARCHITECTURE Develop sound and practical information security architectures tailored to organizational needs. Kratos’ security experts support the deployment and maintenance of manageable, robust, and secure systems and applications, including cloud systems. Learn More INCIDENT RESPONSE Limit damage and reduce the recovery time and costs after a security breach. Kratos can help develop an initial incident response capability, tune an existing capability, or supplement existing incident response teams with targeted security expertise. Learn More Cyber: Operations, Defense, & Engineering Kratos services help to mitigate risk by assuring that internal systems and information are secure. As part of the testing, we deliver a report that summarizes a clear set of findings and recommendations for improvement, with an emphasis on actionable breach prevention. The Kratos team specializes in technical testing, including: PENETRATION TESTING Designed to assess security before an attacker does. Penetration testing tools simulate real-world attack scenarios to discover and exploit security gaps that could lead to stolen or compromised data. Penetration testing helps protect vital business data from future cybersecurity attacks, including social engineering and insider threat testing and analysis. Learn More AUTOMATED CONTINUOUS MONITORING SERVICES Using proven processes and automation tools, Kratos helps Cloud Service Providers (CSPs) with accurate and automated processing of vulnerability scan file analysis and POA&M maintenance. Providing a faster and more cost-effective approach. Learn More VULNERABILITY ASSESSMENTS Define, identify, classify, and prioritize vulnerabilities in computer and network infrastructures, allowing an organization to put preventative measures in place to mitigate the threats. Learn More APPLICATION SECURITY TESTING Application security encompasses measures taken to improve the security of an application, often by identifying, fixing, and preventing security vulnerabilities. Different techniques are used to surface such security vulnerabilities at different stages of an applications lifecycle, such as design, development, deployment, upgrade, and maintenance. Learn More Work with a Leader and Make a Difference Opportunities Contact Us 5971 Kingstowne Village Pkwy, Suite 200 Alexandria, VA 22315 Phone: (703) 254-2000 Fax: (703) 254-2010 Map and Directions Systems & Platforms Unmanned Systems Tactical UAVs Small UAS Swarming Aethon Aerial Targets High Mobility Ground Vehicle Target M-PAK Leader/Follower System Autonomous Truck Mounted Attenuator Space Systems Training Systems C5ISR Systems Ballistic Missile Defense Targets Products UAVs Air Land & Sea Avionics CDL Compliance Tester Software-Defined Radios Space Networks Satellites Signals Antennas Microwave Electronics About Kratos Divisions Careers Leadership Small Business Ethics & Compliance Corporate Governance Locations & Contacts Upcoming Events Sitemap Investors Press Releases Events & Presentations Financial Information Stock Information Investor FAQs NASDAQ: KTOS $20.09 -0.62 1:00 PM EST (Copyright West LLC. Minimum 15 minutes delayed.) © Copyright 2006-2021 Kratos Defense & Security Solutions, Inc. Privacy Policy CCPA Terms of Use