Divine Njodzeka, Cisa, Secplus, Cmmc-Rp, Csm Email & Phone Number

Hyattsville, Md, Us

- Educate clients on the new DoD regulation (CMMC) for DIB especially the DFARs and CUI and how to be CMMC compliant, various steps involved and when to expect full implementation.- Assist clients in defining the scope of their Controlled Unclassified Information (CUI) and establishing CUI boundaries.- Performed 4 annual self-assessments for clients in the automobile, critical infrastructure, and transportation sectors. - Conducted four NIST 800-53-Rev 5 Assessments on critical… Show more - Educate clients on the new DoD regulation (CMMC) for DIB especially the DFARs and CUI and how to be CMMC compliant, various steps involved and when to expect full implementation.- Assist clients in defining the scope of their Controlled Unclassified Information (CUI) and establishing CUI boundaries.- Performed 4 annual self-assessments for clients in the automobile, critical infrastructure, and transportation sectors. - Conducted four NIST 800-53-Rev 5 Assessments on critical infrastructure preparing the SAP, SAR, and helping clients to develop POA&Ms, and providing advice on remediation.- Demonstrated 8 NIST 800-171 Assessments for telecommunications, automobile, critical infrastructure, and transportation.- Provided education and guidance to these companies on the Cybersecurity Maturity Model Certification (CMMC).- Conducted thorough assessments of information system controls across diverse platforms and devices, including Windows, Linux, UNIX operating systems, databases, and network devices, contributing to enhanced system security posture.- Contributed to the categorization, selection, and implementation of security controls, adhering to stringent NIST and FIPS requirements and fortifying the company's cybersecurity framework. - Perform reviewing security artifacts including, but not limited to, System Security Plans, inventories, screenshots of technical files, scan data, requirement traceability matrices, control allocation tables, and security assessment reports.- Conduct regular assessments on assigned systems to ensure renewal of systems ATO.- Exposure in managing temporary ATOs due to unforeseen contingencies realized during assessments leading to the creation of open POA&Ms to track and remediate critical and high vulnerabilities before a 3-year ATO can be granted.- Thoroughly read and review information system documents like System Security Plans (SSP), Security Assessment Reports (SAR), and Executive Summaries to ensure FISMA compliance. Show less

Alexandria, Virginia, United States

- Assessed information systems to make sure the controls are implemented correctly and performing their assigned functions following NIST 800 special publications particularly NIST 800-53 and Federal Information Processing Standards (FIPS). - Conducted thoroughly reviewing and assessing technical, operational and management controls following the RMF NIST 800-37 rev 1 methodology and other NIST 800 publications.- Exposure to assessing information system controls on various platforms and… Show more - Assessed information systems to make sure the controls are implemented correctly and performing their assigned functions following NIST 800 special publications particularly NIST 800-53 and Federal Information Processing Standards (FIPS). - Conducted thoroughly reviewing and assessing technical, operational and management controls following the RMF NIST 800-37 rev 1 methodology and other NIST 800 publications.- Exposure to assessing information system controls on various platforms and devices including Windows, Linux, UNIX operating systems, Databases and Networks devices.- Proficient in categorizing, selecting, and implementing security controls according to NIST and FIPS standards. - Planned and prioritized tasks, effectively managing resources to ensure the timely, efficient delivery of project objectives and optimizing operational efficiency. - Proficient in evaluating various security artifacts such as System Security Plans, inventories, technical file screenshots, scan data, requirement traceability matrices, control allocation tables, and security assessment reports. - Conduct regular assessments on assigned systems to ensure renewal of systems ATO. - Collaborate with ISSOs to create and manage POA&Ms for identified system vulnerabilities and track findings to ensure that they are remediated and closed.- Exposure in managing temporary ATOs due to unforeseen contingencies realized during assessments leading to the creation of open POA&M’s to track and remediate critical and high vulnerabilities before a 3-year ATO can be granted. - Thoroughly read and review information system documents like System Security Plans (SSP), Security Assessment Reports (SAR) and Executive Summaries to ensure FISMA compliance. Show less

Washington Dc-Baltimore Area

- Proficient in performing system risk management following the NIST risk management framework - Conduct security assessment on assigned systems to ensure FISMA compliance following NIST SP 800-53 rev 4, NIST 800-53A, and FIPS. - Evaluate security controls on information system platforms that include Windows, Linux, UNIX, Databases and Networks - Coordinate with project lead to plan time, prioritize tasks, and use assigned resources. - Review technical, operational… Show more - Proficient in performing system risk management following the NIST risk management framework - Conduct security assessment on assigned systems to ensure FISMA compliance following NIST SP 800-53 rev 4, NIST 800-53A, and FIPS. - Evaluate security controls on information system platforms that include Windows, Linux, UNIX, Databases and Networks - Coordinate with project lead to plan time, prioritize tasks, and use assigned resources. - Review technical, operational and management security controls per the NIST 800-53A requirements. - Draft and review security artifacts including, but not limited to, System Security Plans, inventories, security control traceability matrices, control allocation tables and security assessment reports. - Collaborate with the ISSO to draft and manage POA&M for authorized systems with appropriate schedule completion dates and track findings until closure. - Experienced managing extended ATO’s due to exceptions/waivers ignited by open POA&M’s. - Experienced writing assessment reports, assessment plans, assessment procedures, assessment schedules to ensure that systems controls are assessed on time to obtain ATO's. - Evaluating and/or creating System Security Plans (SSP), Contingency Disaster Recovery Plans (CDRP), Risk Assessment Reports (RAR), Security Assessment Reports (SAR) and Executive Summaries. - Support higher-level employees in research, examinations, investigations, audits, and inspections of security controls for compliance to NIST SP 800 series. Show less

Lanham, Maryland, United States

- Experienced in performing system risk management following the NIST risk management framework.- Conduct security assessment on assigned systems to ensure FISMA compliance following NIST SP 800-53 rev 4, NIST 800-53A, and FIPS. - Evaluate security controls on information system platforms that include Windows, Linux, UNIX, Databases and Networks - Coordinate with project lead to plan time, prioritize tasks, and use assigned resources. - Review technical, operational and… Show more - Experienced in performing system risk management following the NIST risk management framework.- Conduct security assessment on assigned systems to ensure FISMA compliance following NIST SP 800-53 rev 4, NIST 800-53A, and FIPS. - Evaluate security controls on information system platforms that include Windows, Linux, UNIX, Databases and Networks - Coordinate with project lead to plan time, prioritize tasks, and use assigned resources. - Review technical, operational and management security controls per the NIST 800-53A requirements. - Draft and review security artifacts including, but not limited to, System Security Plans, inventories, security control traceability matrices, control allocation tables, and security assessment reports. - Collaborate with the ISSO to draft and manage POA&M for authorized systems with appropriate schedule completion dates and track findings until closure. - Experienced managing extended ATOs due to exceptions/waivers ignited by open POA&Ms. - Experienced in writing assessment reports, assessment plans, assessment procedures, and assessment schedules to ensure that systems controls are assessed on time to obtain ATOs. - Evaluating and/or creating System Security Plans (SSP), Contingency Disaster Recovery Plans (CDRP), Risk Assessment Reports (RAR), Security Assessment Reports (SAR), and Executive Summaries. - Support higher-level employees in research, examinations, investigations, audits, and inspections of security controls for compliance to the NIST SP 800 series. Show less

Washington Dc-Baltimore Area

- Assessed information systems to make sure the controls are implemented correctly and performing their assigned functions following NIST 800 special publications especially NIST 80053 and Federal Information Processing Standards (FIPS). - Conducted thoroughly reviewing and assessing technical, operational and management controls following the RMF NIST 800-37 rev 1 methodology and other NIST 800 publications. - Exposure in assessing information system controls on various… Show more - Assessed information systems to make sure the controls are implemented correctly and performing their assigned functions following NIST 800 special publications especially NIST 80053 and Federal Information Processing Standards (FIPS). - Conducted thoroughly reviewing and assessing technical, operational and management controls following the RMF NIST 800-37 rev 1 methodology and other NIST 800 publications. - Exposure in assessing information system controls on various platforms and devices to include Windows, Linux, UNIX operating systems, Databases and Networks devices. - Proficient in categorizing, selecting, and implementing security controls per NIST and FIPS requirements. - Planned and prioritized tasks, effectively managing resources to ensure the timely, efficient delivery of project objectives and optimizing operational efficiency.- Perform reviewing security artifacts including, but not limited to, System Security Plans, inventories, screenshots of technical files, Scan data, requirement traceability matrices, control allocation tables, and security assessment reports. - Conduct regular assessments on assigned systems to ensure renewal of systems ATO. - Collaborate with ISSOs to create and manage POA&Ms for identified system vulnerabilities and track findings to ensure that they are remediated and closed. - Exposure in managing temporary ATOs due to unforeseen contingencies realized during assessments leading to the creation of open POA&M’s to track and remediate critical and high vulnerabilities before a 3-year ATO can be granted. - Thoroughly read and review information system documents like System Security Plans (SSP), Security Assessment Reports (SAR), and Executive Summaries to ensure FISMA compliance. - Collaborated with co-workers to ensure that deliverables were completed with the highest quality and submitted in a timely manner per FISMA specification. Show less