Erich Kron Email & Phone Number

Florida, United States

Clearwater, Fl, Us

Using my extensive IT and cyber security experience, I educate IT administrators, security professionals and users on ways to protect themselves and their organizations from cyber attacks that include ransomware, phishing and other social engineering attacks. In this role I write blog articles, participate in webinars, participate in live and online security discussion panels and live presentations to security and IT professionals across the country.I have been honored to shared my knowledge and experience at multiple BSides events ranging from San Diego to Detroit and points in between. In addition, I speak to people at all levels of IT and cybersecurity from front-line practitioners to C-Level executives across nearly every industry. See my projects section for a listing of recent public speaking engagements and webinars.

Palm Harbor, Florida, Us

I was responsible for the organizational security and regulatory compliance of a 250 employee SaaS provider. I performed significant improvements in the security architecture to include the deployment of the Alienvault OSSIM SIEM platform, Snort IDS sensors, Multi-Factor Authentication for administrators (Yubikey) and reconfiguration of Symantec Endpoint Protection and CheckPoint firewalls. In addition, I responded to regulatory and compliance inquiries, mapped the security controls to NIST 800-53 and was the primary POC for the SOC 2 Type 2 audit.

Alexandria, Virginia, Us

I was responsible for all aspects of customer service, member retention and engagement activities in an information security association with over 111,000 certified members globally. I led multiple teams situated across the globe, to include the US, Hong Kong and London, while also supporting Latin America and China offices. I work with information security professionals around the world to provide the tools, training and educational opportunities to succeed in the InfoSec industry. • Using my experience as an information technology and security professional, I was responsible for identifying and implementing benefits that add value to membership in our association.• Oversaw 18+ local educational events including our US Government focused event, annual Security Congress and Secure event series as well as the global information security awards program. • Responsible for the organizations chapter program which encompasses over 150 global chapters.• Managed a multi-million dollar departmental budget.• Led the maturing of processes within the department resulting in the decision to not back fill several positions while maintaining high customer service levels.

San Francisco, Ca, Us

I served on a 3-person speaker panel with Allison Miller and Meng-Chow Kang, members of the (ISC)2 Board of Directors. Topics included the importance of learning to communicate security and technical issues with the C-Suite and the importance of developing soft-skills as opposed to just technical skills.More information at http://www.rsaconference.com/speakers/erich-kron

I discussed what certification means and how it compliments experience on a resume. I also spoke about the difference between certificate programs and certifications and had a 15 minute QA session.

Reston, Virginia, Us

A key senior leadership position responsible for the overall management and strategic vision of the Information Assurance and physical security program for the Regional Cyber Center - Western Hemisphere (formerly CONUS-TNOSC). I am responsible for a team of 18 security professionals performing IT vulnerability management, regulatory compliance, system accreditation, customer service and physical security missions related to classified and non-classified Information systems across the United States. • Responsible for the strategic security vision, monitoring and enforcement of organizational information security policies and standards while considering cost, labor, regulatory, contractual and legal constraints. • Analyze security related processes and provide meaningful changes to improve security posture, efficiency and cost savings while working within the ITIL framework and complying with Army regulations and best practices. • Successfully lead teams during high-visibility security events, providing quick, concise instruction and leadership for multiple technical teams, while also providing reporting and operational impact updates to senior management.• Provide leadership to multiple teams of information security professionals responsible for the overall IA posture of the US Army information system network and computing infrastructure.• Brief senior members of management on items related to IA and security functions.• Maintain an awareness of current security threats and trends while recommending technical and non-technical solutions to protect the organization. • Reorganized the access management and account management team to increase productivity while reducing manpower and still maintaining customer satisfaction and meeting organizational KPI’s.

Reston, Virginia, Us

A key resource providing both technical and non-technical guidance and direction for the Information Technology Security Auditing program for the Army Continental United States Theater Network Operations and Security Center. I lead a team of 5 auditors and code reviewers responsible for the continual security auditing of Army information system assets across the United States.• Maintain a repository for all systems Department of Defense (DoD) Information Assurance Certification and Accreditation (C&A) process (DIACAP) and C&A documentation and modification to support Designated Approving Authority (DAA) and also maintain enterprise-level records of DIACAP certifications.• Perform system audits and verify compliance with Information Assurance Vulnerability Alert s (IAVA) and Security Technical Implementation Guides (STIG). • Alternate Branch Chief for the security team and alternate Information Assurance Security Officer (IASO) for the CONUS Theater Network Operations Security Center (CTNOSC).• Report detailed findings and provide briefings and updates to the Security Manager and other Information Assurance staff.• Assist in identification and remediation of security-related risks on IT systems.• Document information assurance and security related policy and procedures.

Reston, Virginia, Us

Managed complex, multi-million dollar information technology projects undergoing consolidation in to the US Army APC Datacenters. This included long-term project management working with stakeholders from several Army and government entities. I was responsible for ensuring the systems being deployed met security, functional and regulatory requirement through testing, document review and technical research.• Developed test plans, ensured security, functionality and compliance with Army and DoD regulations.• Defined project scope, milestones and objectives; developed work plans, schedules, and resource estimates.• Generated status reports, conducted project planning and status meetings.• Provided written and oral briefings to all levels of management within our organization.• Received multiple awards for my performance and have been nominated as the STG Employee of the Quarter. • Voting member of the Technical Review Board which provides technical guidance to the U.S. Army for enterprise technology systems. • Alternate Team Lead for a highly visible team within the organization.

Tucson, Arizona, Us

Effectively managed a team of skilled field technicians supporting technology for medical and commercial customers. I assisted field technicians with technical issues, worked with the sales department to architect technical solutions and ensured customer satisfaction while remaining profitable. • Reviewed technology and project plans.• Scheduled and managed customer technology implementations.• Managed team of field technicians and Provided technical guidance and design assistance for the sales force. • Scheduled, dispatched and provided tier 2 support for field technicians.• Designed, deployed and debugged Windows servers, Active Directory, Exchange 2003 and 2007 and desktop operating systems • Deployed LAN and WAN network solutions including site-to-site VPNs and remote user VPN’s over T1, DSL, wireless and fiber optic connections.

Falls Church, Virginia, Us

I performed Active Directory administration and managed, monitored and deployed domain controllers for the US Army CONUS (Continental United States) Active Directory forest. I assisted in deploying and migrating many U.S. Army installations to the enterprise CONUS Active Directory forest from Windows NT. I was assigned to the most politically sensitive sites in the region due to my ability to work through difficult situations and ensure customer satisfaction.• Administered domain controllers and certificate servers supporting over 80,000 users.• Administered user accounts, DNS, WINS, DHCP and certificate services for regions of the CONUS AD forest. • Ensured servers were patched, updated and compliant Information Assurance Vulnerability Alerts (IAVA’s).• Supported certificate-based, IPSEC encrypted connectivity between domain controllers.• Created and deployed Group Policy Objects.• Performed disaster recovery procedures and coordinated hardware replacements with the hardware vendor.

I was responsible for the operation of the Information Technology department in a 130,000+ square foot aerospace machining and manufacturing environment, and the Tucson Aeroservice Center which operates out of the Marana Regional Airport facility.• Responsible for the upgrade from an antiquated AIX-based database to a modern SQL-based ERP system, saving the company money and providing a much higher level of customer support and satisfaction.• Performed management duties to include promoting, reprimanding and terminating employees as required.• Maintained routers, switches, and firewalls that provided LAN and WAN connectivity at the central location as well as the geographically separate airport location. • Maintained T-1, DSL and Frame Relay connections that provided internet access and VPN connectivity.• Implemented a remote access solution to allow customers to upload design plans electronically which greatly reduced the time required to begin manufacturing and greatly improved customer satisfaction.

Bachelor Of Science, It - Networks Administration, Information Technology

Diploma, General Studies