Jack Whitsitt Email & Phone Number

United States

Toronto, Ontario, Ca

Intentional break to focus on other pursuits.

Cottonwood Heights, Utah, Us

Mclean, Va, Us

Developing a FAIR-based sustainable risk quantification program architecture and analysis frameworks in support of quantification-driven risk governance.

Spokane, Washington, Us

On advisory board for non-profit leading and shaping the future of risk quantification and forecasting.

Norwalk, Connecticut, Us

Building another FAIR-based Information Security Risk Quantification and Forecasting Program

Charlotte, Nc, Us

Key Responsibilities1. Lead the development of a globally recognized Information Security Risk Modeling and Analysis Program based on Factor Analysis of Information Risk (FAIR) 2. Lead Risk Based Decision Tool Development, Review, & Enhancements3. Perform Standalone Risk Consulting, Risk Analysis, and Threat Modeling with Enterprise-spanning scope to drive down uncertainty in risk decisions and increase consensus understanding of risk drivers4. Communicate results, findings, and key risk drivers to executives, management, and technologists to develop co5. Partner with cross-enterprise organizations (such as Enterprise Stress Testing) to develop custom models and assumptions in support of robust, modular, sustainable risk analysis6. Develop and Optimize risk-quantification dependent processes7. Execute significant Outreach and Training efforts (having now reached hundreds of employees)8. Meet with external public and private organizations to provide risk forecasting program development guidance9. Assist with management of internal audit and compliance requirements, including Model Risk Management

Clackamas, Oregon, Us

1. Participant in several NATO/internationally sponsored initiatives developing solutions and confidence building measures (CBMs) and other strategies between nation to lower instability and reduce conflict risk in cyberspace2. Taught self-developed, on location class for executives, SMEs, and lay people on “Cyber Risk Framework Development”3. Assisted Federal Reserve Bank on project to develop a cyber risk management framework and maturity model4. Recognized participant in White House sponsored effort to develop a National Cyber Security Framework (NISTCSF)5. Coordinated series of workshops to create report on Small & Medium electric utility Incident Response needs

Arlington, Virginia, Us

Co-Coordinated national government cyber security relationship with private transportation sector. Typical responsibilities included:1. Designing and running sector-wide cyber security exercise2. Coordinating the launch of a national risk assessment of the oil and gas pipeline subsector3. Providing co-leadership to the Transportation Systems Sector Cybersecurity Working Group (TSSWG) in support of the National Infrastructure Protection Plan (NIPP)/Homeland Security Presidential Directive 7 (HSPD-7)

Alexandria, Virginia, Us

Short 1099 contract to Securicon to investigate customer control systems (SCADA) incident. Utilized technical log analysis, scripting, visualization, presentation, and control systems security knowledge to determine potential root cases and present to executive leadership.

Idaho Falls, Id, Us

Assisted with National Cyber Incident Response Coordination, Communication, and Concept of Operations Development for the DHS Industrial Control Systems Emergency Response Team (ICS-CERT) in the National Cybersecurity and Communications Integration Center (NCCIC) – the primary group responsible for providing national government cyber security assistance to critical infrastructure.

Reston, Va, Us

1. Critical Cyber Infrastructure Projection SME, Enterprise Security ArchitectUtilized utilize Federal Enterprise Architecture (FEA) and SABSA Enterprise Security Architecture knowledge to provide NIST and FISMA-driven security policy, engineering, and compliance services to TSA2. Enhanced TSA’s cyber security role with private industry as the Transportation Sector Specific Agency (SSA) under the National Infrastructure Protection Plan (NIPP)/Homeland Security Presidential Directive 7 (HSPD-7).

Reston, Va, Us

Contracted to utilize Federal Enterprise Architecture (FEA) and SABSA Enterprise Security Architecture knowledge to provide NIST and FISMA-driven security policy, engineering, and compliance services to TSA

Bethesda, Md, Us

Contracted to use ArcSight SIEM correlation and SOC CONOPS experience to enhance the FBI’s internal SOC team. Work with ArcSight administrator, ESOC lead, and other team members to develop ArcSight rules, channels, and analysis methodology. Oversee second-shift contractors and provided senior level analysis escalation.

Us

1. Developed analysis methodology, advanced automated data correlation and filtering techniques, and led development/selection and integration of custom tools. Led client operational relationship with large government Incident Response Coordination contract. 2. Repeatedly rewarded for outstanding analysis capability and then promoted to multi-disciplinary Tier 3 team charged with improving the SOC through technology, process, training, and customer service.

Provided IT and Desktop support to Perot Systems customers throughout the U.S. Notable engagements include work at a VX Nerve Agent / Weapons of Mass Destruction decontamination facility in Indiana, providing support on a Y2K preparation project for AT&T, and working directly with Ross Perot at a conference to provide on-camera technical support during a news interview. MCSE at the time.