Doug Bohnenblust Email & Phone Number

As a Defense Counterintelligence and Security Agency (DCSA) (formerly Defense Security Service) Information Systems Security Professional (ISSP), I perform the following:* Review, validate, and verify contractor Information System Security Plans, supporting documentation, and evaluating computer systems for accreditation of contractor information systems to process Federal Information following the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF). I provide the Authorizing Official (AO) with a recommendation to issue either an Authority to Operate (ATO) letter or a Denial ATO (DATO) letter. In RMF this is the Security Control Assessor role in RMF.* Lead and conduct on-site oversight visits of contractor facilities for Security Vulnerabilities Assessments (SVA), reviewing Continuous Monitoring documentation, and other supporting documents as well as interviewing Facility Security Officers, Information System Security Managers, Information System Security Officers, and System Administrators.* Conduct Administrative Inquiries regarding information spills; this is typically when information of one level of classification has been introduced to a computer system at a different clearance level. These investigations include gathering the facts, conducting reviews of the events, as well as providing cleanup details to the organization that committed the spill.* I meet with company officials from corporate leadership, to managers, to front office staff and I have effective communications with everyone.* Conduct operating system reviews per Security Technical Implementation Guidelines (STIG) using DoD tools such as Security Content Automation Protocol (SCAP) Compliance Checker (SCC) and STIG viewer.* Collaborated on a pilot program developing guidance for ISSP’s (agency-wide) to analyze Controlled Unclassified Information (CUI) located throughout Industry.

Fort Knox, Ky

I was the Government lead on the team managing a database system. This system gathered data to generate reports regarding computer security and related deficiencies within the Human Resource Command and the computer networks supporting the Data Center Management Branch (DCMB). The reports were used by each branch so they could determine their computer security posture.My primary task was the documenting of the processes in use, the data sources, the database structure, queries, reports, and scripts. I standardized the method by which the different branches would request either modification to existing reports or request new reports. I was using the International Standards Organization 9001 standard for this documentation to comply with the new requirements of DCMB to implement these standards. I developed Standard Operating Procedures (SOPs) for recurring manual tasks.As the team lead, I was the liaison between DCMB and the team migrating Microsoft Structured Query Language (SQL) Server systems from the Windows Server 2008 R2 and SQL Server 2008 R2 environment to the US Army standard of Windows Server environment of Windows Server 2012 R2 and SQL Server 2014. I attended meetings and maintained the communications channels to keep leadership informed of any changes in the timelines.

Fort Knox, Kentucky, United States

I worked for the United States Army Human Resources Command - Personnel Information Systems Directorate as an Information Technology Specialist in the Open Systems (IBM AIX) group.I used Tripwire (a security and compliance monitoring tool) to monitor and track compliance issues on IBM AIX servers. I conducted data and trend analysis of the data being collected via this tool to track down some of the reporting issues we were having. I worked with the AIX team and staff from Tripwire to determine the causes of the inconsistencies and on applying the recommended fixes.I was involved with the quality control reviews of data being stored in spreadsheets in preparation for this data to be migrated to an in-house tracking system.I created, deleted, and reset user accounts. In six months, I closed over 300 help desk tickets regarding user accounts.

Sheridan, Wyoming, United States