QSA

Protecting critical data since 1997, Sword & Shield Enterprise Security, Inc. is the premier holistic information security provider. With solutions designed to meet the needs of a dynamic security and compliance landscape, we deliver evaluation, remediation, and ongoing monitoring and management to ensure you maintain the most comprehensive security posture possible.Headquartered in Knoxville, TN, our consultants are available to assist clients in all aspects of the security and compliance lifecycle, from information security testing to compliance assessments in PCI, HIPAA and more.

• Serve as contracted consultant for HIPAA risk and compliance audits using PCI and NIST standards and best practices• Provide secure data recovery and forensic analysis on Windows, Mac and Linux computer systems using open source and commercial tools• Provide consulting services on information system security, database design, network and wireless security• Provide custom hardware and software solutions to meet client specifications and application needs• Provide project management for acquisition, installation, training and support of small business networks• Perform hard drive imaging and analysis to support out of state litigation and the investigation of intellectual property theft, identity theft, network intrusion and employee theft of corporate data, and Sunshine Law violations• Provide consultation for disaster response, business continuity, information security, business development, education and training for domestic and international partners• Provide security and disaster recovery presentations to business community and civic organizations• Provided mentoring for academic internship in computer forensics for the University of Central Florida• Provide support and leadership for international and domestic business development

• Functions as the CIO for the foundation I am responsible for the management of current web-based technologies, learning management systems and the evaluation and implementation of new technology resources to meet current and future needs • Served as the project manager for the movement, update, and upgrade of an open-source LMS with over 22,000 register users from around the world • Manage the LMS security to ensure confidentiality, integrity and availability through a role based access control system and firewall configuration• Coordinated the incident response to a DDOS on the LMS and to a loss of availability due to failed system upgrade• Evaluate and implement new open-source technologies for document sharing, storage and management, online project management between multiple advisory and working groups • Perform gap analysis on technical and administrative controls • Evaluate and recommend policies and procedures to improve operational goals and objectives based on GRC framework and best practices• Perform new business development by improving foundation’s marketing program, improving communication with current and future training centers, executive level presentations to potential business partners and by making recommendations for new opportunities • Work with current and future training centers in Central America, China, Canada, Portugal, Africa, the Caribbean, Korea, and Japan • Evaluate current training center performance and compliance to existing policies and procedures• Serves as a liaison between the National Disaster Life Support Education Consortium, the NDLSF program Office and the NDLSF BOD

• Serve as a contracted consultant for HIPAA risk and compliance audits using PCI–DSS, NIST, HIPAA, HITECH, Meaningful Use and best practice standards• Assess internal and hosted heath care applications to ensure the availability, integrity and confidentiality of protected information and ePHI.• Produced the final security report, risk register and executive summary to the senior IT management team at a Long Island, NY trauma center.• Developed remediation recommendations based on industry best practices• Perform Meaningful Use assessments• Preform information security policy assessments and procedure recommendations• Perform gap analysis on technical and administrative controls • Perform executive level presentations on current security posture, assessment findings and best practices

• Served as SME and consultant to on HIPAA, Physical Security and Information Systems Risk Assessments• Provide client support and training for compliance in NIST, COBIT, ISO, HIPAA, NCUA, FFIEC, PCI, CIP and FEMA standards and regulations • Managed network security and access control to provide Accountability, Integrity and Confidentiality • Performed project management for all contracted risk assessments • Managed the daily operation of the company including sales, marketing, customer support, education, and training• Served as the SME for software development to ensure proper workflow and reporting• Served as the project manager for custom software development to meet CIP audit standards.• Performed business development activities helping to create strategic partnerships, evaluate markets, and business opportunities in order to grow market share

• Program manager for the national and international sales teams and was responsible for $4.5 million disaster medicine/public safety related sales annually • Provided subject matter expertise on the various grant programs related to homeland security and hospital preparedness including the interpretation of grant requirements to ensure deliverables were being met and organizations were compliant with the requirements established by the Department of Homeland Security• Served as the SME on the integration of human patient simulation in to advanced disaster response training in hospital, pre-hospital, academic and public safety environments• Served as the company’s liaison to the National Disaster Life Support Foundation, and the NDLS training centers• Corporate member of the National Disaster Life Support Education Consortium • Served as the subject matter expert on the revision of METI’s Disaster Medical Readiness Learning Module in order to meet NIMS compliance and to integrate training objectives into the National Response Frameworks and the Incident Command System

• Developed the specifications and managed the acquisition and implementation of the District’s Emergency Operations Center including data, communications, physical security, information security and emergency notification systems• Implemented a web based portal for information sharing between 12 county health departments for disaster preparedness and bioterrorism response using SSL and user authentication • Provided financial analysis and programmatic reporting to the State of Georgia Office of Emergency Preparedness and the US Department of Health and Human Services relating to grant requirements and regional readiness capabilities• Managed a staff of five full-time professional project managers, educators and consultants utilizing Microsoft Projects, Access, Excel and Visio to track program deliverables and to monitor employee performance of 350 staff members across 12 counties

• Developed hardware, software and network requirements for upgrading IT infrastructure within the State Office of EMS• Implemented the Georgia PCR2000 Project (EMS data system) and the bioterrorism monitoring program utilizing Microsoft Visual Studio, Microsoft Access, MS Server 2000, Microsoft Information Server, MS SQL2000, Visio and Crystal Reports for the processing of approximately 1 million records annually• Developed data, security, and implementation requirements for the successful movement of 20,000 electronic certification records from the Composite Board of Medical Examiners to the Department of Human Resources, Office of Emergency Medical Services, transitioning from a mainframe environment to MS SQL 2000. • Provided expert analysis and reporting on local, regional and statewide EMS data using various data mining tools, resulting in improved data compliance, decreased response times, improved performance of 911 zone providers and the strategic placement of AEDs. • Served as department’s liaison and technical adviser for EMS data integration to the Governor’s Office of Highway Safety, Injury Prevention, EMSC, CODES2000 Traffic Records Coordinating Committee, and Georgia EMS Data Taskforce • Provided technical training on data collection, analysis, security, reporting standards, and data integrity, resulting in a 98% compliance from pre-hospital providers and regional EMS offices• Lectured at various statewide EMS conferences on EMS data management, quality assurance in EMS, new technologies and the integration of EMS information systems to improve EMS system development

• Monitored and evaluated continuing education requirements for 800 EMTs and paramedics to ensure compliance with State statue utilizing Microsoft Access and Excel• Monitored and evaluated the delivery of initial EMT and paramedic training provided by 7 technical education programs• Investigated complaints and compliance issues and made recommendations for corrective actions to the State Office of EMS• Provided expert technical consultation and support to pre-hospital care providers to meet quality control and assurance programs utilizing new technologies and data management• Performed expert data analysis to insure data integrity and improve performance outcomes and decrease response times for 30 EMS and first responder agencies• Performed data analysis and evaluated continuing education requirements for 800 EMTs and paramedics to ensure compliance with State statue utilizing Microsoft Access and Excel• Monitored and evaluated the delivery and pass rates of EMT and paramedic training provided by 7 technical education programs• Investigated complaints and compliance issues and made recommendations for corrective actions to the State Office of EMS • Provided expert technical consultation and support to EMS providers on quality assurance programs utilizing new technologies and data management tools• Performed expert data analysis via Microsoft Access, Excel and Crystal Reports to insure data integrity and improve performance outcomes and for 30 EMS and first responder agencies

• Performed budget analysis and forecasting to ensure cost effective, 24 hour operations• Mentored Prehospital and administrative staff on providing outstanding service to internal and external customers• Provided expert technical consulting and support for the development of requirements, acquisition, and integration computer technologies for EMS systems• Supervised the daily operations of 60 EMTs and paramedics at a level II trauma center• Performed business analysis on fleet and equipment acquisition, maintenance, repair and life cycle utilizing Microsoft Office products• Performed budget analysis and forecasting with Excel to ensure cost effective, 24 hour operations • Performed business analysis and developed the requirements for the acquisition and integration computer technologies for EMS systems• Provided data analysis utilizing Microsoft Access and Excel to improve staffing patterns, vehicle placement, supply management, and decrease receivables