Frank El Email & Phone Number

Woodbridge, Va, Us

Crest Security Assurance, LLC (CSA) is a SBA 8(a), Women-Owned,Small Disadvantaged Business (SDB). CSA’s security experts have directly consulted for DoD and as well as other civilian agencies to combat threats in cyberspace. Our experts have successfully delivered comprehensive Cyber security support in the areas of advanced persistent threat analysis, incident response, certification and accreditation, vulnerability assessment, and threat reporting.Our tactical experience supporting cyber security operations provide a detailed understanding of the risk picture from the ever changing threat landscape driven by continual advancements by cyber adversaries. Our lessons learned an best practices will provide our customers, its partners, and the public the expertise to accomplish these objectives: Leadership-deliver technology solutions for stakeholders that are innovative, flexible, responsive, and collaborative; Security enhance a defensive infrastructure that is reliable, robust, available, and protected and Return-on- Investment continually improve to maximize efficiency, information sharing, and cost effectiveness.

Chantilly, Virginia, Us

o Created Security Control Assessment Plans (aka. Certification Test Plans) to obtain System Owner approval for control assessment activitieso Performed Independent Verification & Validation on C&A documentation to ensure security controls compliance and artifacts supported requirements.o Validate site security posture by evaluating Eeye Retina security scan reports, physical security stance, and personnel security processeso Evaluate vulnerabilities for impact, operational viability, corrective action, and/or compensating/mitigating controls.o Conducts Interviews, Tests, and examinations of established system security controls to determine compliance with NIST 800-37 and 800-53a guidanceo Implement/verify DISA STIG compliance by administering the DISA gold disk and determining false positives, exceptions, and mitigation strategies by evaluating Microsoft Group Policies/Security Review Readiness reports for both server and client

Us

o Responsible for multiple critical 33,000+ user DoD databases; ensuring uptime, system health, and multiple enclave data replicationo Manage/monitor database objects through both Oracle Enterprise Manager (OEM) and SQLplus command-line o Manage user account and role additions, creation, and resets o Monitor Solaris workstations for oracle process/instance utilization o Initiates database (full/redo) backups if automated processes do not initialize o Reset processes utilizing Solaris/UNIX terminal command line interface o Maintains working knowledge of Solaris, Oracle, and Windows (SQL, PL/SQL statements/scripting, shell scripting, Active directory) o Utilize Remedy trouble ticket management software for fix action tracking and management

o Tasked to update existing IT continuity of operations plan (COOP) template for Defense Distribution Center (DDC) enterprise SSAAo Utilized NIST SP 800-34, 800-53, OMB A-130, and DoD 8500.2 to revamp the DDC COOP; researched the NIST contingency planning control family (CP-X) along side DoD 8500.2 continuity subject area (COXX-1) based on established network criticality/sensitivity levels.o Created and submitted the document for customer approval

Randolph Afb, Tx, Us

o Completed Altus AFB first enterprise C & A; received full 3-year DAA accreditation. Effort consolidated over 6,000 network devices into one SSAAo Perform Security Test and Evaluation (ST&E)/Residual Risk Assessment processes during system C & Ao Researched Information Assurance and C&A requirements utilizing NIST SP 800-53, AFI 33-202, and DoD 8500 serieso Operated as base lead on incident response; worked closely with system administrators on threat analysis and reporting to Air Force CERT (know as AF CND)o Annually trained 48 Information System Security Officers (ISSOs) of their primary roles and responsibilities (e.g., threat recognition, security policies, and incident response)o Conducted a one-on-one ISSO training for newly assigned ISSO o Served as the focal point for Air Force Information Awareness Training program for Altus AFB; coordinated mass communications (e.g., flyers, emails, and posters) and reported the statistics annually

Randolph Afb, Tx, Us

o Directly supervise twenty shift personnel, while coordinating all C2 effortso Process Flash and other high level precedence messages to disseminate through Air Force High Frequency (HF) radio networko Relay and process reconnaissance HF broadcasto Configure antennas, radios, modems, KG-84 cryptographic systems through digital patch panels for Air-Ground-Air secure data mission requirementso Accomplish traffic analysis to track system usage and customer baseo Perform a daily inventory of all Communication Security (COMSEC) equipment and materialso Brief executives on current HF radio operation mission requirements, support, and outages

M.S., Information Technology

B.S., Management/Information Technolgy