Accenture, Booz Allen Hamilton, FRSecure and ICF

About Booz Allen Hamilton

Booz Allen Hamilton builds advanced technology for government.

Booz Allen serves public- and private-sector clients, both U.S. and international. Booz Allen has completed its acquisition of the Ultra I&C Mission Solutions business, which now operates as the commercial product and solutions component of Booz Allen's defense technology business. Booz Allen cites a 110-year heritage and over a decade of hands-on SI expertise.^[5]

Booz Allen is helping government and industry close the cybersecurity speed gap. Booz Allen builds cyber tech to close the speed gap between SI-powered adversaries and traditional cyber defenses. Booz Allen's work includes hunting threats across critical networks, responding to real intrusions, and running red team exercises. Booz Allen builds defensive solutions for global customers, from national missions to critical infrastructure. The Booz Allen Cyber Weapon Index measures SI models' ability to autonomously execute cyberattacks.^[7][8]

Vellox products pair machine-speed automation with models trained on adversary tradecraft. Vellox Reverser is an autonomous malware reverse engineering and threat intelligence product. Vellox Ranger is a detection engineering product that autonomously maps an environment to surface and stop adversary activity. Vellox LayerOne validates SI outputs for accuracy, compliance, and trust.^[7]

Booz Allen works alongside the Global 2000 on technology and security. Booz Allen secures healthcare environments, from clinical operations to R&D. Booz Allen helps financial institutions stay ahead of threats, reduce risk, and meet regulatory demands. Booz Allen protects smart factories, legacy systems, and connected products. Booz Allen embeds trust, governance, and security into every phase of the AI lifecycle, from development to deployment. Booz Allen secures infrastructure across cloud, OT, and smart manufacturing environments. Booz Allen offers integrated governance, risk, and compliance (GRC) solutions. Booz Allen's incident response and threat management work includes containment, forensic analysis, and recovery support.^[8][10]

Booz Allen has a cyber-physical defense (CPD) team that specializes in the security and defense of systems in critical infrastructure organizations and weapon/space platforms. Booz Allen works with business clients throughout their OT cybersecurity journey, from assessments and strategy development to engineering, remediation, and threat detection. Booz Allen's OT/ICS SOC-as-a-Service (SOCaaS) offering consists of a team of trained cybersecurity practitioners focused on identifying and responding to active and emerging threats. For DOW clients, Booz Allen tailors its SOC requirements to the More Situational Awareness for Industrial Control Systems (MOSAICS) framework where applicable. Booz Allen's tailored solutions enable enterprise-wide cyber threat detection analytics that are vendor and technology agnostic. Booz Allen has implemented anomaly and threat detection solutions across OT networks, including large enterprise IT, OT/ICS enclaves, and fleet/weapon system maintenance networks. Booz Allen secures data and networks, weapons systems, space systems, industrial control systems, medical devices, autonomous vehicles, mobile technology, and cloud-based systems. Booz Allen's solutions use digital twins and cyber-physical test beds for vulnerability discovery and threat mitigation. Booz Allen helps clients implement federal guidance such as Space Policy Directive 7 (SPD-7), which builds on PNT executive order 13905.^[9][10]

Booz Allen helps clients define and implement an agency-specific strategy, build and deploy mission-specific applications, and scale and integrate capabilities into enterprise operations. Booz Allen delivers targeted services such as identifying promising use cases, training the workforce, and implementing SI governance. Booz Allen provides support for federal SI programs including data and model management, SI engineering, and platform management and security. aiSSEMBLE is Booz Allen's open-source SI development toolkit and integrated team approach to standardize the design, development, and delivery of SI solutions. aiSSEMBLE provides patterns for common design requirements, configurable templates to create data/ML pipelines, toolkits to standardize the ML lifecycle, and the auto-creation of containers and Kubernetes configurations for deployment.^[5]

Booz Allen has been a partner of the Department of Homeland Security (DHS) since its inception and of the Department of Justice (DOJ) for decades. Booz Allen aids DHS with advanced analytics to secure ports and counter threats.^[6][9][11]

About FRSecure

FRSecure is an information security services company that helps organizations build security programs. FRSecure states that its mission is to fix the broken information security industry. FRSecure states that information security is all it does and that it does not do IT, sell hardware, or provide telco services. FRSecure has been in business for over 10 years, and its team has more than 300 years of combined experience working in information security and 30 different kinds of certifications. FRSecure describes many organizations as understanding that they need to do something around information security and data protection without knowing which risks pose the biggest threat or where to begin combatting them.^[1][2][3][6]

FRSecure offers a risk assessment designed to discover and quantify information security risk. FRSecure uses a risk assessment methodology and platform called S2, and the final report of a gap assessment maps the specific controls to the corresponding controls in S2. Gap assessments from FRSecure are conducted with regulatory requirements in mind. FRSecure analysts work with the client team to understand which capabilities and controls are in place.^[2][4][5][6]

FRSecure uses SecurityStudio for vendor risk management, and that software platform employs S2Vendor to measure and manage the security risk of an organization's vendors. FRSecure offers three different levels of vendor risk management services depending on needs and the number of vendors.^[7]

Penetration testing from FRSecure uses emulated real-world attacks to discover and exploit weaknesses in systems, configurations, and processes. FRSecure experts follow Penetration Testing Execution Standard (PTES) methodology during penetration testing. FRSecure offers pen tests that expose vulnerabilities in internet-facing systems, networks, firewalls, devices, and web applications that could lead to unauthorized access. Red teaming from FRSecure is a real-world attack simulation focusing on defense evasion with a mix of social engineering and external and internal network-level testing. FRSecure social engineering exercises use techniques that include email, phone, and physical methods.^[8][9]

FRSecure technical services team helps identify vulnerabilities through regular scanning. FRSecure describes vulnerability assessments as identifying technical vulnerabilities through a combination of automated tools, expert interpretation of the findings, and remediation recommendations. FRSecure web application scanning uses automated tools to evaluate web applications for vulnerabilities such as Cross-site scripting, SQL Injection, Command Injection, Path Traversal and insecure server configurations.^[10]

FRSecure describes incident response as an organized approach to rapidly responding to the aftermath of a cybersecurity breach, incident, or attack. FRSecure assists in the identification, containment, and recovery of ransomware and helps organizations prevent and prepare for future incidents. FRSecure tabletop exercises are designed to practice and find weaknesses in plans such as disaster recovery, incident response, and more.^[6][11]

As a PCI DSS Qualified Security Assessor Company, FRSecure provides the expertise necessary to review and advise organizations on PCI DSS compliance. FRSecure certified professionals can help an organization define its PCI DSS environment, determine compliance gaps, and provide necessary attestations of compliance. FRSecure helps prepare organizations for the SOC 2 audit and does not perform the actual audit itself. FRSecure overlays risk assessment results onto the five Cybersecurity Maturity Model Certification (CMMC) levels so an organization can see where it stands in each level. For organizations using Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), or Microsoft 365 (M365), FRSecure provides configuration and security health checks based on CIS benchmarks.^[3][6][12]

FRSecure notes that heavily regulated industries such as healthcare and financial often require their providers to comply with Type 2 standards. FRSecure states that organizations that process cardholder data involving any of the major card brands have PCI DSS requirements to meet. FRSecure states that it can support a wide range of requirements across almost any industry.^{[1][3][5][6][7][10][11][12]}

About ICF

ICF sells security and resilience services that help government and industry strengthen defenses against cyber, physical, and emerging threats. ICF frames resilience as key to protecting America's security, economy, and way of life. ICF's security work covers safeguarding critical assets, fortifying infrastructure, and building a security-first culture that considers cyber and physical convergence. ICF develops capabilities and executes real-time operations in support of national security.

ICF's infrastructure security and resilience work starts with understanding threats to mission-critical assets. ICF experts assess vulnerabilities, analyze cyber and physical risks, and develop strategic defenses to safeguard essential operations and national security. ICF experts design custom algorithms using statistics, machine learning, and AI. ICF analyzes the domain, integrates expert insights, and builds analytics for strategic decision-making and national security. ICF experts apply analytical methods and cybersecurity expertise to develop solutions for mission needs and national defense.

ICF Fathom is ICF's suite of tailored AI solutions and services for organizations. ICF's suite of AI solutions and services features customizable intelligent agents. ICF has ServiceNow and Appian capabilities. ICF partners with marketing, commerce, cloud and analytics platforms, with vertically-specific technology providers particularly in the energy sector, and with supply chain professionals. ICF says technology partners play a larger role in its offerings as the world becomes more interconnected. ICF seeks to collaborate with experts, suppliers, contractors, and technology partners.^[5]

ICF delivers its services to clients across the U.S. federal government through a contracts portfolio. ICF works for government and commercial clients in areas including public health, IT modernization and digitization, energy efficiency, natural disaster relief and mitigation, utility consulting, and climate, environmental and infrastructure services. ICF provides clients with facts, data, and independent analysis to help them further their missions. ICF's team includes business analysts and policy specialists who work alongside technologists, data scientists, and creatives. ICF has built and integrated a set of marketing and communications capabilities to help organizations develop engagement with their audiences.^[6][7]

Incentive Technology Group, LLC (ITG) provides cloud-based platform services to the U.S. federal government. ICF combines its strategic consulting, analytics and domain expertise with ITG's digital capabilities to help agencies architect and develop the technology platforms they need for their missions. Creative Systems and Consulting provides IT modernization and digital transformation solutions to U.S. federal agencies. SemanticBits provides digital modernization services using open-source frameworks to U.S. federal health agencies. ICF pairs its health and social services with ESAC's health technology solutions and applied understanding of genomics, proteomics and physical sciences in its digital health solutions. DMS Disaster Consultants is a disaster planning and recovery services firm whose capabilities augment ICF's disaster response, recovery and preparedness work in the public sector. Applied Energy Group (AEG) provides energy technology and advisory services to electric and gas utilities, state and local governments, and state energy offices.

ICF traces its origin to 1969, when a WWII veteran and former Tuskegee Airman, along with three U.S. Department of Defense analysts, founded the Inner City Fund to finance businesses in Washington, D.C. ICF describes itself as a global solutions and technology provider. In 2012, ICF acquired GHK Holdings Limited, a London-based consultancy with offices across Europe and Asia that added capabilities in environment, health, education, social programs, logistics, and international development. Mostra SA is a communications agency based in Brussels, Belgium, whose strategic communications capabilities complement ICF's policy work. ICF files annual reports on Form 10-K and quarterly reports on Form 10-Q with the U.S. Securities and Exchange Commission.^[2][6]