Leidos Receives FedRAMP Accredited Third Party Assessment Organization Status

Company's Accredited Testing and Evaluation Laboratories Perform Security Assessments for Cloud Service Providers

News provided by

Nov 25, 2013, 07:50 ET

RESTON, Va., Nov. 25, 2013 /PRNewswire/ -- Leidos [NYSE: LDOS], a national security, health and engineering solutions company, announced its Accredited Testing and Evaluation (AT&E) Laboratories earned FedRAMP (Federal Risk and Authorization Management Program) Accredited 3PAO (Third Party Assessment Organization) Status. Leidos AT&E Labs are now authorized to perform independent security assessments for cloud service providers who seek FedRAMP Provisional Authorization in order to provide federal agencies cloud services and products.

(Logo: http://photos.prnewswire.com/prnh/20131120/PH20896LOGO)

The FedRAMP is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. As a FedRAMP Accredited 3PAO assessor, Leidos AT&E Laboratories will engage with cloud service providers, develop security assessment plans, perform testing of cloud security controls, and develop security assessment reports. The plans, reports and findings are reviewed extensively by the FedRAMP Information System Security Office and the Joint Authorization Board to ensure cloud providers adhere to quality and acceptability criteria.

"Leidos is honored that our Accredited Testing and Evaluation Labs received FedRamp Accredited Third Party Organization status. It is an essential role that strengthens information security of cloud-based systems for government agencies and expands the portfolio of services we can now offer to cloud service providers," said Sam Gordy, Leidos group president.

To become a FedRAMP Accredited 3PAO assessor requires a rigorous application process reviewed by General Services Administration and National Institute of Standards and Technology experts; demonstrated technical competence in the security assessment of cloud-based information systems; and meeting inspection requirements of the International Organization for Standardization.

Leidos AT&E Labs comprises of two other laboratories; the Common Criteria Laboratory and the Cryptographic Security and Testing Laboratory. These laboratories test and evaluate the hardware and software of commercial security products utilized within government systems to protect sensitive information. Services include testing against FIPS 140-2 for Cryptographic Module, FIPS 201 for Personal Identity Verification under NIST and GSA, Transportation Worker Identification Credential and Security Content Automation Protocol.

About Leidos
Leidos is a science and technology solutions leader working to address some of the world's toughest challenges in national security, health, and engineering. The Company's 23,000 employees support vital missions for our government and the commercial sector, develop innovative solutions to drive better outcomes, and defend our Nation's digital and physical infrastructure from 'new world' threats. Leidos is headquartered in Reston, Va. and had approximately $6 billion in revenues for fiscal year 2013, on a pro forma basis, following the spin-off of the company's technical, engineering and enterprise IT business on Sept. 27, 2013. For more information, visit www.Leidos.com.

Statements in this announcement, other than historical data and information, constitute forward-looking statements that involve risks and uncertainties. A number of factors could cause our actual results, performance, achievements, or industry results to be very different from the results, performance, or achievements expressed or implied by such forward-looking statements. Some of these factors include, but are not limited to, the risk factors set forth in Leidos' Annual Report on Form 10-K for the period ended January 31, 2013, and other such filings that Leidos makes with the SEC from time to time. Due to such uncertainties and risks, readers are cautioned not to place undue reliance on such forward-looking statements, which speak only as of the date hereof.