The QSSI Testing Technology Practice was created to improve the quality and effectiveness of our services and end products, reducing the financial and technical risks, and implementing the compliance with our customer's standards. We leverage the technical talents of our staff and historical data from across all QSSI projects and have developed a collection of best practices. We have divided these practices into three areas: Framework; Foundation; Tailored.

QSSI offers Independent Verification and Validation (IV&V) services consistent with the latest systems engineering and process improvement models, and is derived from concepts and standards including the IEEE Std. 1012 - 2004 Standard for Software Verification and Validation, and the CMMI® process maturity framework. QSSI provides an objective assessment of products and processes throughout the project life cycle in an environment free from the influence, guidance and control of the development effort. Services include:

• Criticality Analysis
• Requirements Analysis and Tracing
• Software Design Analysis
• Milestone Reviews and Metrics
• Code Review and Analysis
• Document Inspection
• Defect Investigation
• Training Evaluation, Planning, Execution, Reporting, and Witnessing

QSSI has a comprehensive understanding and extensive experience in providing in-depth expertise in Security Test and Evaluation (ST&E). Our ST&E processes follow guidelines defined in the National Institute of Standards and Technology (NIST) standards including SP-800-37, 800-53 and 80053a.

Our methodology includes collaboration tools to ensure clients are fully prepared and completely engaged; proven tracking and management system; and template-driven, process-based methods that ensure quality and repeatability. Our services cover three major security domains:

QSSI has an established Security Certification, Accreditation and Assessment process based on NIST guidelines. QSSI provides a faster, simpler, more cost-effective way to create, manage and measure ST&E readiness through C&A packages. The C&A packages address scope, roles, responsibilities, management, commitment, and compliance and formal documented procedures to facilitate the implementation of the security assessment policies and security assessment controls. We assemble and evaluate the suitability and the readiness all necessary documents required for the ST&E.  We conduct findings discussions, create the corrective action plan (CAP), and prepare a detailed C&A tracking calendar.