Contents

• Services
• Deployment Options

Services

OpenFISMA is free and open software. You may download, use, modify, and redistribute OpenFISMA.

Endeavor Systems, Inc. provides this software under a flexible license in the belief that transparency and openness promote the development of high-quality software at reduced cost.

Endeavor also offers a full range of paid services as a part of our open source business model. Our engineers have the experience and expertise to solve a variety of issues related to your agency's OpenFISMA implementation and information assurance program.

The following list describes some of the services we provide. If you are interested in any service (whether it is listed here or not), please contact us for more information.

• Installation

  We will help you plan and execute your implementation of OpenFISMA. This includes recommending specs for the hardware in your data center (or hosted in an off-site secure facility), installing and configuring the application. We will ensure that your application is installed safely and securely.

• Data Conversion

  Convert your data from your existing, legacy formats and load into OpenFISMA.

• Administration

  Our experienced sysadmins can handle all the details of running your system, including account management, system configuration, inventory management, and upgrades.

• Technical Support

  We provide several tiers of technical support by phone and e-mail.

• Development Support

  If you need new features built into OpenFISMA, our software engineers are intimately familiar with the architecture of the system, as well as the high quality standards that are required for code which is submitted into the project repository.

• Training

  We have a complete training program that will take users from 0-60 on OpenFISMA. Training is conducted on-site by knowledgeable team members.

• System Documentation

  We can write the SSP for your OpenFISMA system and help you C&A the system for authorization in a federal environment.

Deployment Options

OpenFISMA Deployment Architecture

OpenFISMA Deployed in
C&A Secure Hosting Facility

OpenFISMA can be deployed in a 1-tier or 2-tier architecture. A 1-tier architecture means that the database server and web server would be hosted on the same physical box, under the same operating system. A 2-tier architecture means that the database server and web server are hosted on separate, physical boxes and connected by a high-speed network connection.

The 1-tier architecture is suitable for small organizations, while the 2-tier architecture allows for increased scalability. We can assist you with picking the proper architecture for your implementation; if your needs change in the future, we can even migrate you from a 1-tier to a 2-tier.

OpenFISMA can be hosted in your data center, or we can recommend a certified and accredited federal hosting facility for you. OpenFISMA requires PHP and MySQL, and can run on most popular operating systems.

Due to the sensitive nature of the information that OpenFISMA is designed to store, we do recommend that it is operated behind a firewall, not exposed to WAN traffic, and all data is encrypted during transit using SSL and a signed security certificate.