Fully dedicated to NERC/CIP Compliance - Creating and maintaining all CIP evidence packages for all in-scope systems across ITNERC CIP Tracking - ensuring that regulatory timeframes that occur on a regular cadence are maintained and metAction Tracking - Maintains the TVAC corrective actions repository for POAMS, risk items, device assessment recommendations, etc.NERC CIP Group Participation - Backup to the program manager for CIPSWG and CIP-related working groups

Cybersecurity Governance and Engagemento Provide support for the ongoing execution of TVA's enterprise-wide Federal information Security Management Act (FISMA) programo Supports the development of security architecture and security policies, principles, and standardso Prepares agency reports for internal and external audiences including audiences at a federal level

Cybersecurity Risk ManagementMain domains include Risk Management and Vulnerability Management programs within Cybersecurity Risk Management (CRM).o Exposure to vulnerability management toolsets such as Nessus, Identity Finder, Fortify WebInspect, Kryptowire, and Impervao Assisted in the creation of an initial risk dashboard interface to house risk metricso Identifies, evaluates, recommends mitigations, and monitors strategies and products at TVAo Involved in Active Cyber Vulnerability Assessment field work that is conducted at various TVA locationso Reviews NERC/CIP standards when preparing for CVA worko Manages and conducts all internal and external web application assessments for business units in ITo Primary analyst of investigating and tracking of security concerns with the ability to elevate the concerns to a risk analysis or a risk evaluation status o Collects monthly KRI/KPI/NIST standard policy information for metrics and reportso Investigates and approves requests for website unblocks and non-standard catalog softwareo Manage and conduct web application scans on internally and externally facing web applications programmed in house or by vendor; privacy scanning in search of PII. o Contibutes to the Authorization to operate (ATOs) process during the web application scan involvement.o Involved in phishing campaigns for the organization and collects the metrics for reporting purposes.

Assisted in all CRM program areas: Vulnerability Management, Modeling and Simulations, Situational Awareness, and Risk Managemento Collected monthly KRI/KPI information for metrics and quarterly reportso Managed the privacy scanning tool in search of employee PII/RPII informationo Approved requests for website unblocks and non-standard catalog softwareo Initiated web application scans for internal and external TVA sites Spent the last year of my internship integrating with the team and building the necessary skills to be an asset to the group post graduation.

o Installation/disconnection of circuits and long distance telephone lines with Telecommunication service providers while handling the documentation for all activity (AT&T Business Direct, Verizon Enterprise, MCI, etc.)o Established new internet services for TVA substations and other locations for business needso Frequent asset inventory of active circuit/line asset informationo Exposure to networking components such as: Cisco hardware configurations, proxies, and AWS solution storage positioned by the organizationo Helped improve budgeting costs on circuits that affected the corporation’s infrastructureo Contributed to processing carrier invoices to Accounts Payable

o Thoroughly practiced HIPAA laws throughout the organization o Managed the PBX system which included relaying status of hospital functionality to internal and external partieso Notified on-call physicians regarding updated conditions of patients in-house and patients within individual practices (roughly 80 practices)o Learned valuable interpersonal communication skills by interacting with health care professionals across the Tennessee Valley