David B. Email & Phone Number

Frederick, Md, Us

Frederick, Maryland, United States

Work with clients as a CCP to determine compliance requirements as they relate to meeting DFARS 252.201-7012/NIST SP 800-171/CMMC 2.0 requirements. Actively assist clients with documenting and implementing policies and procedures required along with reviewing controls needed to work towards compliance with DoD mandates for supply chain.• Consult with Defense Industry Base (DIB) clients on developing and implementing system security plans (SSP), plan of action and milestones (POAM), policies, procedures, and documentation.• Perform guided self-assessments on all 14 domains and 320 assessment objectives under NIST SP 800-171 and utilizing the DoD Assessment Methodology (DoDAM) to fully document controls in place, provide an accurate score, and identify any gaps that are required to be placed in a POAM for remediation efforts. • Develop internal documentation for our Managed Service Provider (MSP) offerings.• Analyze and work with third party providers body of evidence to determine what a client would inherit from services by the third party and what a client would still need to put in place to comply with NIST SP 800-171 and CMMC.• Provide consulting services on other frameworks, guidance, and regulations (i.e. – NIST SP 800-53, FedRAMP, PCI DSS, HIPAA, HITRUST, ISO 27001/2)

Frederick, Maryland, United States

Worked with both the NOC and SOC team to determine clients compliance requirements as they relate to meeting DFARS 252.201-7012/NIST SP 800-171/CMMC 2.0 requirements. Actively assisted clients with documenting and implementing policies and procedures required along with reviewing controls needed to work towards compliance with DoD mandates for supply chain. • Consult with Defense Industry Base (DIB) clients on developing and implementing system security plans (SSP), plan of action and milestones (POAM), policies, procedures, and documentation.• Performed guided self-assessments on all 14 domains and 320 assessment objectives under NIST SP 800-171 to fully document controls in place and any gaps that were required to be placed in a POAM for remediation efforts. • Analyzed third party providers body of evidence to determine what a client would inherit from services by the third party and what a client would still need to put in place to comply with NIST SP 800-171 and CMMC.

Frederick, Maryland, United States

As a CMMC RP and Candidate CCP I assist clients with meeting requirements of NIST 800-171 and CMMC 2.0.

Frederick, Maryland, United States

As a CMMC AB Registered Practitioner I provide sales consulting services to the DIB around Microsoft's Government Community Cloud (GCC) and GCC High platform as it relates to NIST 800-171 and CMMC requirements.

Frederick, Md

Wheaton, Md

Frederick, Maryland

Account executive supporting ISSMs, CISOs, CIOs on IAM, IRP, and INFOSEC programs. Worked with consultants and engineering team to determine appropriate scope for risk management services in accordance with appropriate frameworks and regulations (i.e. – ISO/IEC, HITRUST, PCI DSS, NIST CSF, HIPAA, and GDPR). Monitored project status and milestones for both technical and risk management services to ensure timely completion. Acted as the liaison between the consultant and the client to determine best course of action for corrective action plans resulting from identification of lacking security controls from prior assessments and technical security reviews.

Washington D.C. Metro Area

Account executive supporting ISSMs, CISOs, CIOs on IAM, IRP, and INFOSEC programs. Worked with consultants and engineering team to determine appropriate scope for risk management services in accordance with appropriate frameworks and regulations (i.e. – ISO/IEC, HITRUST, PCI DSS, NIST CSF, HIPAA, and GDPR). Monitored project status and milestones for both technical and risk management services to ensure timely completion. Acted as the liaison between the consultant and the client to determine best course of action for corrective action plans resulting from identification of lacking security controls from prior assessments and technical security reviews.

Washington D.C. Metro Area

Account executive supporting Information Technology (IT) Directors and staff of mental health facilities in selection of appropriate modules of Credible’s Office of National Coordinator (ONC) certified Health Information Technology (HIT) to meet Meaningful Use and Merit-Based Incentive Payment System (MIPS) requirements under the Medicare Access and CHIP Reauthorization Act (MACRA). Provided onsite and remote training for clients prior to the onboarding process of the Credible EHR platform.

Washington D.C. Metro Area

Director responsible for supporting consulting staff in working with clients on healthcare related consulting services (HIPAA, HITRUST, Meaningful Use, PCI DSS, NIST CSF). Monitored project status and milestones for both technical and risk management services to ensure timely completion. Ensured adequate sales pipeline protocols were followed through managing direct line communications between consulting staff and clients. Worked with new client ISSMs, CISOs, CIOs on IAM, IRP, and INFOSEC programs prior to onboarding and transference to lead consulting staff. Grew consulting services by 110% year over year.

Account executive supporting ISSMs, CISOs, CIOs on IAM, IRP, and INFOSEC programs. Worked with consultants and engineering team to determine appropriate scope for risk management services in accordance with appropriate frameworks and regulations (i.e. – ISO/IEC, HITRUST, PCI DSS, HIPAA). Monitored project status and milestones for both technical and risk management services to ensure timely completion. Acted as the liaison between the consultant and the client to determine best course of action for corrective action plans resulting from identification of lacking security controls from prior assessments and technical security reviews. Grew consulting and technical services by over 110% year over year.

Inside sales representative responsible for prospecting new clients along with maintaining a current client book of business.

Grew annual revenues by 110% consecutively year over year. Managed and trained a staff 50-75 individuals. Assisted with coordination of schedules between inside sales staff and outside sales consultants.

Bachelor Of Science - Bs, Business Managment

Associates, Information Systems Management