David B. Email & Phone Number

Frederick, MD, US

Frederick, Maryland, United States

• Work with clients as a CCP to determine compliance requirements as they relate to meeting DFARS 252.201-7012/NIST SP 800-171/CMMC 2.0 requirements. Actively assist clients with documenting and implementing policies and.
• Consult with Defense Industry Base (DIB) clients on developing and implementing system security plans (SSP), plan of action and milestones (POAM), policies, procedures, and documentation.
• Perform guided self-assessments on all 14 domains and 320 assessment objectives under NIST SP 800-171 and utilizing the DoD Assessment Methodology (DoDAM) to fully document controls in place, provide an accurate score.
• Develop internal documentation for our Managed Service Provider (MSP) offerings.
• Analyze and work with third party providers body of evidence to determine what a client would inherit from services by the third party and what a client would still need to put in place to comply with NIST SP 800-171.
• Provide consulting services on other frameworks, guidance, and regulations (i.e. – NIST SP 800-53, FedRAMP, PCI DSS, HIPAA, HITRUST, ISO 27001/2)

Frederick, Maryland, United States

• Worked with both the NOC and SOC team to determine clients compliance requirements as they relate to meeting DFARS 252.201-7012/NIST SP 800-171/CMMC 2.0 requirements. Actively assisted clients with documenting and.
• Consult with Defense Industry Base (DIB) clients on developing and implementing system security plans (SSP), plan of action and milestones (POAM), policies, procedures, and documentation.
• Performed guided self-assessments on all 14 domains and 320 assessment objectives under NIST SP 800-171 to fully document controls in place and any gaps that were required to be placed in a POAM for remediation efforts.
• Analyzed third party providers body of evidence to determine what a client would inherit from services by the third party and what a client would still need to put in place to comply with NIST SP 800-171 and CMMC.

Frederick, Maryland, United States

As a CMMC RP and Candidate CCP I assist clients with meeting requirements of NIST 800-171 and CMMC 2.0.

Frederick, Maryland, United States

As a CMMC AB Registered Practitioner I provide sales consulting services to the DIB around Microsoft's Government Community Cloud (GCC) and GCC High platform as it relates to NIST 800-171 and CMMC requirements.

Frederick, MD

Wheaton, MD

Frederick, Maryland

Account executive supporting ISSMs, CISOs, CIOs on IAM, IRP, and INFOSEC programs. Worked with consultants and engineering team to determine appropriate scope for risk management services in accordance with appropriate frameworks and regulations (i.e. – ISO/IEC, HITRUST, PCI DSS, NIST CSF, HIPAA, and GDPR). Monitored project status and milestones for both.

Washington D.C. Metro Area

Account executive supporting ISSMs, CISOs, CIOs on IAM, IRP, and INFOSEC programs. Worked with consultants and engineering team to determine appropriate scope for risk management services in accordance with appropriate frameworks and regulations (i.e. – ISO/IEC, HITRUST, PCI DSS, NIST CSF, HIPAA, and GDPR). Monitored project status and milestones for both.

Washington D.C. Metro Area

Account executive supporting Information Technology (IT) Directors and staff of mental health facilities in selection of appropriate modules of Credible’s Office of National Coordinator (ONC) certified Health Information Technology (HIT) to meet Meaningful Use and Merit-Based Incentive Payment System (MIPS) requirements under the Medicare Access and CHIP.

Washington D.C. Metro Area

Director responsible for supporting consulting staff in working with clients on healthcare related consulting services (HIPAA, HITRUST, Meaningful Use, PCI DSS, NIST CSF). Monitored project status and milestones for both technical and risk management services to ensure timely completion. Ensured adequate sales pipeline protocols were followed through.

Account executive supporting ISSMs, CISOs, CIOs on IAM, IRP, and INFOSEC programs. Worked with consultants and engineering team to determine appropriate scope for risk management services in accordance with appropriate frameworks and regulations (i.e. – ISO/IEC, HITRUST, PCI DSS, HIPAA). Monitored project status and milestones for both technical and risk.

Inside sales representative responsible for prospecting new clients along with maintaining a current client book of business.

Grew annual revenues by 110% consecutively year over year. Managed and trained a staff 50-75 individuals. Assisted with coordination of schedules between inside sales staff and outside sales consultants.

Bachelor Of Science - Bs, Business Managment

Associates, Information Systems Management