Alvin Gonzalez Email and Phone Number

• Constructed the Risk Management Framework package for the CNIC Enterprise Land Mobile Radio (ELMR) system to include system categorization along with selection, implementation, assessment, and monitoring of security controls.• Constructed Department of Defense (DoD) Information Assurance Certification and Accreditation Process (DIACAP) unclassified and classified packages for the CNIC Command, Control, Communications, Computers and Intelligence (C4I) suites and attained an Authority to Operate (ATO) for both systems.• Applied the RMF Bridge Conversion Process to the CNIC C4I classified and unclassified suites for transition from DIACAP to RMF. Both suites attained an RMF ATO.• Audited the application of Security Technical Implementation Guides for C4I and ELMR.• Reported acknowledgement and compliance in response to applicable directives to include Information Assurance Vulnerability Alerts/Bulletins (IAVA/B), Computer Task Orders (CTO) via the Vulnerability Remediation Asset Manager (VRAM).• Participated in the preparation for the CNIC Cybersecurity Inspection • Evaluated and uploaded monthly NESSUS scan results to the CNIC Security Center and provided Detailed Vulnerability and Executive Summary Reports to the program manager.

• Conduct Information Assurance inspections onboard U.S. Naval vessels consisting of physical security inspections of shipboard spaces containing classified network hosts. Review ship’s Certification and Accreditation documentation, e-Eye Retina vulnerability scanning results, Information Assurance Vulnerability Management program, and Department of Defense (DoD) Cyber Security Workforce requirements.• Conduct technical inspector’s reviews of the ship’s Computer Network Defense suite and all shipboard tactical systems and non-tactical systems.• Observe Network failover, IP Services failover and USB Detect demonstrations.• Formulate classified reports of all inspection findings and submit reports to higher authority.

• Maintained requirements to all areas of the Department of the Navy (DON) Information Assurance Certification and Accreditation Plan (DIACAP) for the Enterprise Military Housing (EMH) program.• Analyzed eEye Retina and Security Content Automated Protocol (SCAP) scan results for inclusion in the command’s Plan of Action and Milestones (POA&M).• Tracked compliance of Information Assurance Vulnerability Alerts.• Ensured a mitigation plan for correction of all CAT I, CAT II and CAT III findings.

Performed system security scans using DISA Gold Disk , eEye Retina and SCAP on NAVAIRFOR Learning Resource Center (LRC) Training Systems. Heavily involved in all aspects of DIACAP process for 17 systems throughout East and West Coast, to include network diagrams using MS Visio.

• Administered the Information Systems and Physical Security requirements for a new construction facility capability to process classified information.• Conducted Information Assurance and Physical Security inspections. • Maintained 100% accountability of over 100 classified communications systems.• Maintained the command Information Systems Security Plan and Policy.

• Managed the command Information Assurance Program ensuring the daily monitoring, response, and reporting of the network intrusion detection system.• Ensured compliance of all Information Assurance Vulnerability Alerts and reported results to higher authority.• Responsible for the development and implementation of Information Assurance training material for more than 5,000 users.• Constructed the certification and accreditation documentation for the command’s classified and unclassified networks to include Certification and Accreditation Plan, Continuity of Operations Plan, Contingency Plan, hardware and software inventory listings and network topology diagram.• Managed the Information Systems Division comprised of 30 personnel; provided tactical and non-tactical network support to over 3000 users.