U.S. Department of Labor (DOL), Bureau of Labor Statistics (BLS)

CASE STUDY BELOW

CIVILIAN AGENCY

U.S. Department of Labor (DOL), Bureau of Labor Statistics (BLS)

PROJECT

The Bureau of Labor Statistics (BLS)

SCOPE OF WORK

BLS engaged Enlightened to conduct a security assessment of three of their mission critical data collection systems, their LAN/WAN, and currently, two regional networks located in Chicago, IL and Columbus, OH. The overall objectives of these Security Control Assessments were to:

• Review the implemented security controls for the systems, ensuring they comply with NIST 800-53 requirements; and
• Identify any discrepancies that may be present within BLS' security infrastructure.

DESCRIPTION OF PRODUCTS AND SERVICES PROVIDED TO CUSTOMER

Enlightened assessed mission critical BLS applications using NIST 800-53 Recommended Security Controls for Federal Information Systems to ensure all necessary security controls were documented, implemented, and monitored effectively. The following tasks were conducted:

• Identified the implemented management, technical, and operational controls using NIST 800-53.
• Conducted vulnerability scans to identify weaknesses within the systems.
• Identified security deficiencies in the information systems.
• Developed a findings report that highlighted the security testing methodology, the testing procedures, the identified deficiencies, the recommendations to rectify these weaknesses, and the vulnerability assessment results.

OUTCOME/VALUE/BENEFIT TO CUSTOMER

The information collected by BLS is used to support U.S Congress decision-making; therefore it is essential to safeguard the integrity of the information in order to ensure accurate decisions are being made. To support this mission, BLS has been given the necessary recommendations to ensure they have implemented their security process efficiently.