Overview
JaMaxwell implements zero trust architectures aligned with NIST SP 800-207 and OMB M-22-09 requirements. We design and deploy identity-centric access controls, micro-segmentation, continuous authentication, encrypted communications between all endpoints, and real-time threat detection. Implementations integrate with existing agency identity providers, PIV/CAC infrastructure, and ICAM platforms.
Risk Management Framework Requirements
The NIST Risk Management Framework (SP 800-37 Rev 2) provides a disciplined process for managing security and privacy risk: Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor. JaMaxwell executes all seven RMF steps for federal information systems. We categorize systems against FIPS 199, select and tailor control baselines, implement controls with technical and procedural measures, conduct independent assessments, prepare authorization packages for AOs, and operate continuous monitoring programs.
Why JaMaxwell
- SBA-certified Woman-Owned Small Business (WOSB)
- Primary NAICS: 541512 (Computer Systems Design Services)
- Security-cleared staff with active federal engagements
- Headquartered in Fairfax, VA, 20 miles from the Pentagon
- Demonstrated Risk Management Framework assessment and implementation capability