ACCOMPLISHMENTSCISSP Test Writer - December 2019, November 2020CMMC Registered Professional credential (more pending)Regularly present at major Conferences Security Translator-ensure requirements are properly formed and adequately satisfiedSEE FEATURED section SECURITY ARCHITECT:Relay and formulate client requirements to vendors (subs)Ensure client requirements are met by vendorsTrain ISSO/ISSMProvide Security Plan templates and related trainingPublish IT Security PolicyGuide migration to (Azure) cloud- Azure AD, Backup, Storage planning, DR, etc.Provide solutions to ISSO/ISSM issues (e.g. remote burn to CD)As xCISO:... has significantly increased and substantially improved IT security measures. This includes establishing management oversight, collaborations including all business sectors, and developing security policies....established the goal of security compliance. To effect this goal, ... retained as CISO. The CISO manages the infosecurity program for the ..... The CISO reports to the CIO. The CISO serves as liaison to the CEO, IT/CIO and the business units for all security matters.The CISO has established security plans for compliance with the requirements of the State of Florida, FISMA, & PCI DSS. To fulfill these requirements, the CISO has been creating security policies, standards and procedures. Additionally, the CISO has created a Change Mgt Program with specific policies and procedures to better control changes, which will reduce the likelihood of negative impacts from changes & improve quality.Determines businesses drivers for securityWhere technology based controls have been deficient, the CISO specified improvements. Examples of security improvements implemented include:Established a C-level Board to oversee organization Governance, Risk & ComplianceAdditional email protection, Additional antivirus/anti-malware protectionsImproved audit logging and monitoring Improved Terms & Conditions for use of websitesEnforcement of T & C on websites Implementation of Incident Response & Handling capabilityParticipation in MSISACEstablished liaison with State of Florida CISOImplementation of security awareness programImproved formal procedures for vulnerability patchingImplementation of security review for proposed changesImplementation of security event mgtCompletion of PCI Self-Assessment QuestionnaireEstablished a Change Review BoardImproved compliance reviewsImplementing policies for areas such as Security mgt, change mgt, risk mgt, information classification, etc.Implementation of Chg Mgmt Procedures