Methodology | CymSTAR

CymSTAR’s unparalleled success is built upon our exemplary program management and systems engineering expertise

Our methodology aligns with the Department of Defense’s (DOD’s) joint service Modular Open Standards Approach (MOSA), an integrated technical and business strategy for designing an affordable and adaptable system. Our platform and vendor-agnostic designs maximize the use of commercial off-the-shelf (COTS) products with unlimited data rights, allowing the freedom needed by our customers to upgrade and modify their systems.

Program management and systems engineering know-how
CymSTAR leverages the small business strengths of a flat organizational structure through lower operational costs, better coordination, higher productivity and greater customer commitment. We empower interdependent teams through delegated decision-making authority, accountability for results and recognition of employee achievement.

Our robust management and engineering processes incorporate recognized industry standards, including those in alignment with (IAW) the International Organization of Standardization (ISO), National Institute of Standards and Technology (NIST), American National Standards Institute (ANSI), Electronic Industries Alliance (EIA), International Council on Systems Engineering (INCOSE), Institute of Electrical and Electronics Engineers (IEEE) and Federal Acquisition Regulation (FAR).

These processes, which include ISO/IEC/IEEE 15288:2015, are further detailed below.

Schedule Management guided by a detailed, tailored Integrated Master Plan (IMP) and/or Integrated Master Schedule (IMS).
Risk Management processes developed with reference to the DoD Risk, Issue, and Opportunity Management Guide for Defense Acquisition Programs, January 2017.
Configuration and Data Management (CM/DM) processes developed IAW ANSI/EIA-649, ISO-10007, and ANSI/EIA-836.
Change Management IAW MIL-HDBK-61A.
Quality Management System (QMS) procedures and processes IAW ISO 9001:2015.
Subcontractor & Vendor Management for partnerships with reputable subcontractors IAW FAR 52.219 Limitations on Subcontracting.
Security Management procedures and process IAW 32 CFR Part 117 National Industrial Security Program Operating Manual (NISPOM) and the Defense Counterintelligence and Security Agency (DCSA) Assessment and Authorization Process Manual (DAAPM) V2.2, NIST SP 800-53, Risk Management Framework (RMF), plans and processes IAW DoD 8510.1 Risk Management Framework for DoD Information Technology (IT).
Cybersecurity Management implementation utilizing Defense Information Systems Agency (DISA) Information Assurance Support Environment (IASE) resources and tools such as Windows Secure Host Baseline (SHB), Security Technical Implementation Guides (STIGs), and Group Policy Objects (GPOs).
Financial Management consisting of adequate financial resources and sound management processes for sustaining a stable business and ensuring controlled and profitable growth.

Systems engineering processes based on IEEE, INCOSE, and DOD principles for systems requirements, architecture and detailed design methodology, including ISO/IEC/IEEE 15288 Systems Engineering processes, the INCOSE Systems Engineering Handbook, Model-Based Systems Engineering (MBSE) utilizing Systems Modeling Language (SysML) standards and DOD Systems Engineering Guidelines.
Software development processes based upon the principles of ISO/IEC/IEEE 12207:2017.
Test and Evaluation (T&E) program IAW DODI 5000.89 Test and Evaluation and the Defense Acquisition Guidebook Chapter 8 Integrated Test and Evaluation.
Cybersecurity systems engineering using DISA Cybersecurity Trusted Products / Common Criteria and Approved Products Lists as guidance.
Information Assurance (IA) program in place to obtain Authority To Operate (ATO) and DCSA-vetted facility clearance (FCL).