Dale Ott Email & Phone Number

My responsibilities include assessing security risk in new systems and applications, providing continuing compliance verification of required security controls, and assisting in Internal and External audits.

Iowa City, Iowa

I am responsible for developing an Information Security Management System (ISMS) program with a goal of achieving ISO 27001 certification for the selected Pearson National Services programs. This effort involves working with the project teams’ management and technical staffs, IT and Infrastructure group, Facilities, Human Resources, Legal, and Corporate.

• Led the security access support team for Corporate (USA) and Corporate Center (the Netherlands) applications supported by Corporate Systemso Provided services to Corporate and Corporate Center financial organizations.
• Coordinate with internal Corporate and Corporate Center customers to ensure my team’s access management services are performed in accordance with the SLA
• Support Corporate and Corporate Center functional area managers in evaluating systems and processes compliance with security standards and SOX security requirements
• Perform security risk assessments for the AEGON Corporate Center financial applications at the request of Aegon Corporate Center VP of Information Security, or for Corporate divisional management
• Support Corporate and Corporate Center SOX compliance and Disaster Recovery
• Provide consultative support to AEGON Corporate Center on SOX compliance

• Supported the ongoing information security program within AEGON Global Technology. Provided operational and security planning support for the Enterprise Security Services (ESS) Team and Division Security Officer (DSO)
• Assessed Company security stance with respect to NIST 20 Critical Security Controls.
• Provided quarterly security compliance status to the Enterprise ISO
• Led quarterly owner reviews of Corporate applications security standards compliance
• Developed work area security walk-through process and performed walk-throughs
• Performed quarterly information asset inventory reviews and entitlement reviews

• Develop, maintain, & execute the Corporate IT security program to ensure confidentiality, integrity, & availability of critical customer information, financial information, & information systems
• Led a team of 2 BCP staff and 1 IT security administrator
• Developed & led programs to control risk to data, systems, & business operationso Identified new & reviewed existing vulnerabilities. Recommended countermeasures.o Conducted risk assessments for new IT systems &.
• Prepared & maintained IT risk management strategies to support TDS business strategies
• Developed COBIT-based documentation, led control walkthroughs with external auditors, & performed regular testing for over 20 SOX 404 logical & physical security controls for the first SOX audit
• Self-audited all security controls to ensure security activities comply with TDS policies & standards, as well as government regulations (SOX 404 & HIPAA) Business Continuity Planning (BCP) / Disaster Recover Planning

• Prepared & maintained IT risk management strategies to support TDS business strategies
• Created & facilitated 2 standing security committees, promoting coordination & communication of IT security between 3 TDS business units & within Enterprise IT
• Developed/reviewed TDS security policies, standards, processes (based on ISO 17799) Ensure security controls are effective and efficient
• Worked in a diverse IT environment: mainframe – Z90 & Top Secret operating systems and security package; Solaris Unix; and Windows desktop server and desktop operating system; SAP financial and human resources business.
• Collaborated with 3 TDS business units on security efforts across the enterprise
• Performed technical analysis for security risk of system changes and software development

La Jolla, CA

• Developed security test plans & procedures, conducted tests, documented results as a basis for recommending firewall architectures for VISA International and Pacific Gas & Electric
• Performed security analysis of NSA-proprietary encryption technology implementation
• Conducted formal Certification & Accreditation of 5 US Army tactical information systems & the USAF Automated Records Management System (ARMS). This included security risk analysis, developing security documentation, &.
• Wrote the "Handbook for Secure Systems Implementation," a guide to Certification & Accreditation of Army tactical information systems. This document contributed to the DoD Information Technology Security Certification.
• Created course materials for the National Security Agency staff training “Operating Systems Concepts” “Architectures for Secure Systems”
• Performed independent verification & validation (IV&V) of systems & software design/development documentation

Bs, Electrical Engineering

BS Electrical Engineering

Bs, History/International Studies

Activities and Societies: University music choruses BS History/International Studies