Cyber Defense Magazine Global Edition for 2019

operating costs and continuing to maintain
compliance with the customers’ legislative and
regulatory requirements.
We also leverage CMMI–DEV and CMMI–SVC
Maturity Level 3 processes to deliver best–in–
class Agile, DevOps, and DevSecOps
development methods for our clients. We use
CMMI–DEV to improve engineering and
development processes in all products we
develop and CMMI–SVC to improve
management and service delivery processes to
develop, manage, and deliver services.
Additionally, we utilize Agile, DevOps, and
DevSecOps methods selectively and
methodically (not universally). For instance, we
use Agile methods to improve the process of
delivery; encouraging changes in the functions
and practices of the mission/business and
development teams to better produce the project
and product envisioned by the end–user, or
customer. We employ DevOps methods to
improve the integration of software development
and software operations, along with the tools and
culture that support rapid prototyping and
deployment, early engagement with the end
user, automation and monitoring of software,
and psychological safety (e.g., blameless
reviews). We also leverage DevSecOps
methods to improve the lead–time and frequency
of delivery outcomes through enhanced
engineering practices; promoting a more
cohesive collaboration between development,
security and operations teams as they work
towards continuous integration and delivery.
To further satisfy our U.S. Government
customers, we have complemented our DCO
Framework with another award winning plug and
play component: CSIOS’ Information
Technology Service Management (ITSM)
system. CSIOS ITSM uses the ITIL framework
as its foundation and complements it with other
standards, frameworks, and concepts
contributing to the overall ITSM discipline such
as CMMI, ISO, and PMI. When applicable,
based on the ITSM services provisioned, we also
integrate complementing and handpicked
principles and practices from ISO/IEC 15288 for
System Lifecycle Processes and ISO/IEC 12207
for Software Lifecycle Processes to maximize
the standardization of our services.
The Technologies
To build a safer future in the cyberspace domain,
CSIOS management has committed to ongoing
research and development, adoption of
innovation, and evolution through
modernization. Our immediate future requires
harnessing technologies that integrate
meaningful and relevant intelligence, operations,
and C5 through machine learning, artificial
intelligence, and data science. Equally
important, we strategically, operationally, and
tactically overlay the abovementioned
ingredients on two very important elements.
First, the organizational mission essential
functions, including the implications of the
unclassified and classified environments (e.g.,
cloud environment, weapon systems, space
systems, Industrial Control Systems, IoT) they
support, as well as the operational threat
environment they confront. Second, the differing
and unique high volume, variety, veracity, and
velocity (4Vs) data environments they operate.
These 4V's of big data are of no relevance if
unable to be transformed into meaningful data
visualization and data value (2vs). The 2vs ought
to focus on a joint common operational picture
and shared situational awareness environment
for command decision support.
48