SMALL BUSINESS SHOWCASE COACT, Inc. is a Service Disabled Veteran Owned Small Business (SDVOSB). Niche Areas: Certification & Accreditation (C&A) FIPS140 Cryptographic Modules Testing Security Content Automation Protocol (SCAP) Testing Personal Identity Verification (PIV) Testing C&A Training Classes Common Criteria Intrusion Detection Security Test and Evaluation (ST&E) IRS/Treasury contracts IRS/CPO (5.6 Million Dollars) Department of Treasury/OCC (4 Million Dollars) Dollar amount of Largest Company award Missile Defense Agency (6.5 Million Dollars) 1

SMALL BUSINESS SHOWCASE Brief History COACT, Inc. is a Service Disabled Veteran Owned Small Business (SDVOSB). After 24 years of service at the National Security Agency, and two years at Ford Aerospace Corporation, James McGehee founded COACT, Inc. in COACT, Inc. was initially a one man consulting firm and has grown exponentially. Since 1990, COACT has evolved into a leading provider of security compliance solutions and services. Located in Maryland just off Route 32 West. The facility has 12,000 square feet of office/conference/lab space. COACT Employees hold security clearances ranging from Secret to TSSI. 2

SMALL BUSINESS SHOWCASE Corporate Capabilities COACT, Inc. has developed into a leading provider in the following areas: Certification & Accreditation (C&A) Common Criteria Evaluations Cryptographic Module Testing Independent Verification and Validation (IV&V) Security Test and Evaluation (ST&E) Intrusion Detection Vulnerability Analysis Security Product Evaluations 3

SMALL BUSINESS SHOWCASE Past Performance Both C&A and Common Criteria including such customers as: IRS US Treasury/OCC US Treasury/FMS National Security Agency US Department of Agriculture US Customs Missile Defense Agency Federal Highway Administration Federal Aviation Administration Department of Transportation IBM Boeing Hewlett Packard McAfee, Inc. Canon BAE Systems Cisco Systems Marconi Lexmark International Fortress Technologies 4

SMALL BUSINESS SHOWCASE North American Industry Classification System (NAICS) Security Consulting Services Testing Laboratories Engineering Services 5

SMALL BUSINESS SHOWCASE Other Corporate Attributes GSA Schedule (Schedule 70) ISO 9001 – 2000 Registered Service Disabled Veteran Owned Small Business Cleared Personnel 19 Years in Business No Long Term Debt Employees are certified in the following areas: CISM, CISSP, SSCP 6

SMALL BUSINESS SHOWCASE Other Corporate Attributes - continued Security Content Automation Protocol (SCAP) Testing Personal Identity Verification (PIV) Testing FIPS140 Cryptographic Modules Testing Accredited Laboratories for Common Criteria Common Criteria Testing Laboratory (CCTL) Labs accredited through the National Institute of Standards and Technology (NIST) 7

SMALL BUSINESS SHOWCASE Common Criteria Testing Laboratory The COACT, Inc. CAFÉ Lab is a government evaluation and test facility accredited by the National Volunteer Laboratory Accreditation Program (NVLAP) under lab code Since 1999, the COACT CAFÉ Lab has been an independent Common Criteria Test Laboratory (CCTL). The CAFÉ Lab CCTL is overseen by the National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS) Validation Body. 8

SMALL BUSINESS SHOWCASE Common Criteria Testing Laboratory - continued The CAFÉ Lab has evaluated numerous and diverse product types including switches, web servers, networked data storage devices, databases, firewalls, VPNS, secure wireless devices, and intrusion detection/protection systems ranging from Evaluation Assurance Level 1 (EAL1) through Evaluation Assurance Level 7 (EAL7). The COACT, Inc. CCTL is credited with being the first and only U.S. CCTL to perform an EAL7 evaluation. 9

SMALL BUSINESS SHOWCASE Contract Support COACT, Inc. is currently supporting the Certification Program Office (CPO) by performing System Accreditations for FISMA FY09 reports. In addition, COACT is providing support to the CPO through impact analysis of NIST 800 Series documentation updates on the existing IRS C&A process, maintenance of templates, review of policies and procedures, and support of the FISMA realignment and FDCC initiatives. COACT is also supporting the IRS in their Enterprise Continuous Monitoring (eCM) efforts conducting reviews and analysis of IRS Business Unit testing efforts to ensure the appropriate security controls are tested and that the testing is documented in accordance with established IRS eCM processes and procedures. 10