Summary

Security Incident and Event Management (SIEM), incident response, network security, Security Control Assessments (SCA), Security Documentation, Governance, Risk, and Compliance (GRC), Security Assessment Plans (SAP), Risk Management Framework (RMF), Security Compliance, Privacy, Security Impact Assessment, High-Value Assets (HVA), System Security Plans, Continuous Monitoring, Plan of Action and Milestones (POA&M), DevSecOps, Configuration Management, Infrastructure as Code, Information Assurance

Description

SteelToad is a cybersecurity firm focused on supporting federal agencies to mitigate risk, increase resiliency, and lock down their infrastructure. We do this with three core competencies: Cyber Assessment Services, Security Services, and Governance, Risk, & Compliance (GRC). Following NIST guidelines (800-30, 800-37, 800-53, 800-66), Steeltoad assesses agencies for risk, FISMA compliance, data management, and Zero Trust Maturity Model (ZTMM) compliance. We also provide CMMI and CISA assessments like CRR, EDM, and HVA. Steeltoad's security services include penetration testing, vulnerability management, & compliance scanning. We specialize in cloud security, risk management framework (RMF), continuous monitoring & security assessment services to comply with Authority to Operate (ATO) requirements. Steeltoad has supported multiple federal agencies & maintains industry leading certifications like CMMI Dev/Svc Level 3, ISO 9001:2015, ISO 27001:2022, ISO 20000:1-2018 & is a CMMC C3PAO.

Special details

Secure Systems Engineering, Cybersecurity Governance, Risk Assessments, Security Control Implementation, Assessment and Authorization, Zero-Trust Architecture (ZTA), Data Management Assessments, Cloud Engineering & Migration, Security Assessment Planning, Security Assessment Plan (SAP), Security Technical Implementation Guidelines (STIGs), Security Policy and Procedure Management, Pen Testing, System Categorization, CISA Cyber Resilience Review (CRR), Red Team, Security Control Documentation, CISA External Dependencies Management Assessment (EDM), Blue Team, Business Continuity and Disaster Recover, CISA High Value Asset Assessment (HVA), Purple Team, Incident Response Planning, HIPPA, STERIS

Profile

  • Incorporated in
    Maryland
  • Established since
    2019
  • Main/Branch
    Branch

Address

Contact