Department of Veterans Affairs Security Control Assessment (SCA) Program Support

In 2004, STG conducted an independent security assessment for the Office of the Director VHA Office of Information, Health Information Architecture, and Veterans Health Information Systems and Technology Architecture (VistA). STG was responsible for planning, designing, and implementing a comprehensive requirements management program, including the initiation of a set of phased proof-of-concept exercises that led to the institutionalization of the program. STG’s work included performing tasks related to health information technology architecture engineering, systems engineering, development of blueprint for health architecture, configuration and change management, issues management, and risk management related to requirements and systems engineering.STG’s current VA SCA contract actively supports the infrastructure, processes, and goals of adopting and securing technology for the active exchange of VA information, including healthcare information, among VA resources, DOD, medical, research, and national security organizations that support our Veterans. Under our current contract, STG performs security assessments on every moderate- and high-impact system at Veterans Affairs, including VA medical centers, program offices, regional offices, field offices, community-based outpatient clinics, IT, and data centers. Based upon STG’s IA assessments and documentation, VA meets Office of Personnel Management, VA, and federal regulations ensuring that its IT systems and processes are compliant and secure.