Doh W. Email & Phone Number

Washington, District Of Columbia, United States

 Performs the ongoing RMF/A&A/ATO projects in support of client security systems using NIST SP 800-37 Rev 1 as a guide. Extensive knowledge in Categorizing Information Systems (using FIPS 199 and NIST SP 800-60 Vol 2 Rev 1 as a guide) Selects and implements applicable security controls (technical, operational and management) using NIST SP 800-53 Rev 4 as a guide. Create, update and revise System Security Plans, Contingency Plans, Incident Reports and Plan of Action & Milestones (POA&Ms).  Independently develop a variety of Security Authorization deliverables including; System Security Plans, Security Assessments Reports, Configuration Management Plans, Contingency Plans, and POA&M. Reviews Privacy Impact Assessment (PIA) document after a positive PTA is created and ensure PII findings are recorded in the System of Record Notice (SORN)  Generate, review and update System Security Plans (SSP) against NIST 800-18 and NIST 800 53 requirements. Performs ongoing continuous monitoring using NIST 800-137 Rev 1 as a guide.

United States

Maintained compliance requirements, work instructions and program procedures to promote safety.Coordinated project execution planning meetings with Team members. Interpretation of basic grade stakes to make sure junior operators are accurate in preparing the project site. Perform basic soil testing procedures and surveying of the project sites.

Washington, District Of Columbia, United States

 Performed security controls assessments using NIST SP 800-53A as a guide by means of assessment methods such as Interviews, Examination, and Testing. Develop and conduct ST&E (Security Test and Evaluation) and perform on-site security testing using vulnerability scanning tools such as Nessus. Determined effectiveness of Technical, Operational and Management security controls by assessing whether controls are implemented correctly, operating as intended, and meeting security requirements. Participate in weekly meetings to discuss the status of the assessment process. Scheduled assessment kick-off meetings with assessors and Security Control Interview meetings with the ISSO, System Owners, and Common Control Providers. Created Requirement Traceability Matrix (RTM) and documented whether controls being assessed passed or fail using NIST SP 800-53A as a guide. Created and finalized Security Assessment Report (SAR) and give recommendations to ISSO on how to mitigate or remediate reported weaknesses and vulnerabilities. Reviewed A&A package items using NIST guidance for FISMA compliance such as the System FIPS 199 Categorization, e-Authentication Assessment, PTA, PIA, Contingency Plan (CP), and Contingency Plan Test (CPT)

Master'S Degree, Cyber Security

Bachelor'S Degree, Accounting