What is the applicability of FCAP outside the Federal Agency marketplace?

ServerVault’s delivery baseline – FCAP - is engineered to specifically to address the superset of Federal Agency compliance and certification/accreditation requirements, mandated for the secure and auditable management of Agency IT solutions. That said, although these standards were developed by and for Federal Agency implementations, in large part, these standards are based upon industry best practices and methodology (such as ITIL) that are appreciated and followed by many commercial market segments.

It is clear within the Federal Agency mandates the U.S. Government-biased manner in which these operations must be performed. However, at their core, these standards and requirements result in a highly-secure and disciplined manner of delivery that demonstrates proof of adherence to process, production of service artifacts, and other self-governing procedures that are arguably applicable to any security and accountability-minded organization.

In particular, commercial organizations within regulated industries such as Health Care, Finance, Aerospace & Defense, and security-related fields could certainly benefit from the additional security and accountability measures in place and are delivered with ServerVault’s FCAP. ServerVault actively supports large commercial organizations today in each of these verticals with FCAP, and aside from some of our procedures being “overkill” for these commercial organizations requirements, it is a non-disruptive, highly secure operating model where the benefits and cost-savings can be easily justified for commercial application support requirements.