National Archives chooses Xacta for security management

Xacta Corp. will supply security compliance and risk management software to the National Archives and Records Administration, the company said today. Terms of the three-year, agency-wide agreement were not immediately available.

The National Archives will use Xacta IA Manager to automate various IT security functions, including certification and accreditation, and compliance with the Federal Information Security Management Act.

According to Xacta, a division of Ashburn, Va.-based Telos Corp., the software allows the agency to build repeatable certification and accreditation processes that will improve its security scorecards.

"NARA, like all federal agencies, faces stringent security requirements, and we're pleased to play an active role in helping improve its security posture while also reducing its administrative load," said Richard Tracy, Xacta's chief security officer, in a statement.

The agency has the option to upgrade from Xacta IA Manager Enterprise Edition to Xacta IA Manager Process Enforcement Edition, which includes a new security remediation capability to handle vulnerability management. Company officials said the new product inventories and tests technology assets to identify security holes. It can send alerts and automatically provide fixes for security holes based on agency policies, available patches and best practices.

With prime government IT revenue of $137.6 million, Telos ranked No. 49 on Washington Technology's 2004 Top 100 list, which measures federal contracting revenue.