Harrison Lee Pmp, Cissp, Cisa, Cism Email & Phone Number

I have participated in and led federal independent information security evaluations for compliance with FISMA, Government Auditing Standards, AICPA standards for consulting services, and Office of Management and Budget (OMB) Circular A-130, Appendix III, Security of Federal Automated Information Resources. Work included preparing or assisting the agency in preparing the Inspector General’s segment of the FISMA independent evaluation report and template for submission to OMB. I have participated in and led the IT portions of federal financial statement audit engagements. I am experienced in applying applicable OMB, GAO, and AICPA methodologies and requirements. I participated in the IT portions of financial statement audits, which involved identifying and testing management, operational, and technical controls over financial systems using the GAO’s FISCAM audit methodology. I have participated in and led the Security Assessment & Authorization (SA&A) efforts of federal agencies. SA&A efforts include the documentation and evaluation of General Support Systems (GSS), Major and Minor Applications, System Security Plans (SSP), Security Assessment Reports (SAR), E-Authentication Risk Assessments (E-Auth), Vulnerability Assessments (VA), Privacy Impact Assessments (PIA), Interconnection Security Agreements (ISA), Plan of Actions and Milestones (POA&M), Contingency Plans (CP), Configuration Management Plans (CMP) and the Security Testing and Evaluation (ST&E) of security controls. I performed tests, evaluations, and developed documentation in compliance with industry standards and federal guidance such as: Federal Information Security Management Act (FISMA), Office of Management and Budget (OMB), National Institute of Standards and Technology (NIST) Special Publications, and Federal Information Processing Standards (FIPS).DSS Top Secret: May 2018Specialties: FISMA; FISCAM; C&A; OMB, NIST, GAO, and AICPA Standards and Methodologies

• 

  Virginia Tech

  Business Information Technology