“In the event of a data breach, the Office of Management and Budget (OMB) Memorandum M-07-16, "Safeguarding Against and Responding to the Breach of Personally Identifiable Information," requires agencies to promptly conduct a risk analysis and be prepared to submit a report containing the findings to the Congressional Oversight Committees of the U.S. Senate and House of Representatives, as appropriate.”
-- memorandum issued February 4, 2008 from the Office of Management and Budget

Independent Breach Risk Analysis

For government agencies, acquiring response services can be the most painful part of a data breach. ID Experts provides expert fraud resolution services, ready to go and easy to use. Government agencies can purchase independent risk analysis (IRA) services from ID Experts without filing notification and additional paperwork to the GSA and the Office of Management and Budget (OMB). Under the terms of Blanket Purchase Agreement GS-23F-IRA01, services from ID Experts represent the best value available for independent risk analysis and fraud resolution, determining the level of risk for potential misuse of sensitive information associated with a particular data breach. ID Experts can also help assess risks and plan response prior to a breach, to ensure that an agency can respond swiftly and properly in a breach emergency.

ID Experts is one of only two companies selected by the General Services Administration (GSA) to provide both independent risk analysis (IRA) and fraud resolution services for federal agencies that experience a data breach. (The BPA was awarded per our Financial and Business Solutions (FABS) Schedule contract GS-23F-0037T. Our flexibility and experience enable us to scale and tailor services to handle data breaches of any size.)

The Assess process is led by an ID Experts program manager, assigned within one business hour of the time you contact us, who coordinates all aspects of the IRA. The process includes an initial damage assessment and statement of work (SOW), triage investigation on individuals affected by the breach, a certified damage assessment, risk remediation planning, and a post-mortem debrief to help avoid future breaches. The results of the IRA engagement are a well-documented risk analysis, based on forensic investigation, data scanning and analytics, plus a risk remediation plan.