Modernizing Information Security and Risk Management

As part of advancing Federal Information Security (INFOSEC) and IT Modernization mandates, a Federal Civilian Agency required comprehensive cybersecurity solutions to support the Office of the Chief Information Security Officer (CISO). The challenge involved addressing multifaceted INFOSEC disciplines including Identity, Credential and Access Management (ICAM), Security Assessment and Authorization (SA&A), Re-Engineered Comprehensive Integrity Review Process (RCIRP) designed to reduce, prevent internal fraud, waste and abuse, as well as Continuous Diagnostics and Mitigation (CDM). The tasks required the mitigation of vulnerabilities, management of insider threats, adherence to external compliance standards, and development of secure application systems while ensuring seamless access control and configuration management. The initiative prioritized policy and governance, risk management strategies, and cyber training to empower the agency in facing evolving security threats.

Cybersecurity | Kentro fortified security systems with ISO/IEC 27001-certified practices. We assessed 350+ software applications and ensured full compliance with NIST 800-53 by successfully executing FY23, FY24 and FY25 Federal Information Security Management Act (FISMA) assessments for the Audit Trail System (ATS) – demonstrating sustained audit readiness. We mitigated vulnerabilities for 150+ applications using a Security Operations Center (SOC) Security Tracker with 200+ users. We processed 38,029+ SAM and 1,221+ Top Secret Tracing (TSTRAC) requests to secure access. We analyzed 28,099 potential fraud cases. Kentro is leading the agency’s efforts in rewriting their Information Security Policy to align with NIST CSF 2.0 and supplemental policies to align with NIST 800-53rev.5.

Database System Administration/Engineering | Kentro captured metadata for VPN and wireless connectivity. Our team synchronized metadata daily from ESSO and Active Directory. We migrated the Electronic Access Request Portal (EARP) to Amazon Web Services (AWS) by updating queries and functional documents; developed 120K+ lines of code and updated 350K+ lines of code and developed 500 test cases. Kentro designed secure databases with Oracle and SQL Server, improving data quality.

Data Visualization and Analysis | Kentro created seven Splunk dashboards (e.g., VPN, FISMA metrics) with trends, graphs, and charts. The team conducted data accuracy checks and UAT, ensuring real-time insights and better decisions.

IT Project Management | Kentro led 80+ FTEs across seven agency divisions and 15 offices, meeting CMMI Level III and PMBOK standards. We delivered projects on time and within budget by managing risks, milestones, and stakeholder engagement.

Software Engineering and Web Development:
Kentro automated tasks with 140+ UiPath scripts, supported 5K+ SUIDA users, and added 260+ UI screens. We updated 1K+ user guide pages, validated in excess of 140K+ lines of Java code, and migrated systems to JRE v1.8. The team standardized websites and aligned with UX frameworks. Kentro supported 15+ production releases, developed 17.5K+ lines of code and 100+ test cases over 6 releases.

Kentro’s delivery improved system reliability, user experience, and security posture across the agency’s nationwide IT environment. Continuous monitoring of 200+ production regions and 650+ total environments ensured operational integrity. The Known Issues Database cut issue resolution time by 25%, while SQL automation significantly accelerated data tasks. Database migration optimizations reduced resource needs and freed capacity for other critical tasks. Network improvements enhanced availability to 99%, mitigating downtime risks and supporting the agency’s daily operational demands. Cybersecurity efforts protected sensitive data and reduced vulnerability exposure across hundreds of thousands of devices.

Kentro’s strategic, metrics-driven approach delivered measurable value across enterprise IT operations. The team’s technical excellence strengthened infrastructure resilience, with real-time monitoring of 200+ mainframe regions supporting 68K+ concurrent users. Proactive network optimization increased availability and eliminated outdated assets, improving long-term system performance. High retention rates ensured continuity, while surge capacity kept service levels intact despite resource challenges. Automation of complex SQL workloads freed up technical resources and shortened reporting cycles. In addition to the $6K+ per device annual cost avoidance, the team’s forward-thinking database solutions accelerated cloud migration and system upgrades, reducing future costs. Finally, comprehensive knowledge management—including the maintenance of 14K++ SharePoint sites and 400+ agency websites—ensured that the agency’s vast library of digital assets remained standardized, compliant, and user-friendly. Kentro’s work enabled the agency to meet its mission-critical objectives efficiently and cost-effectively, delivering sustainable improvements that enhance service to millions of Americans.