Information technology consultation featuring the assessment of risks and evaluating compliance with the Federal Information Security Management Act (FISMA)