Kenya Jackmon Email & Phone Number

Reston, Virginia, United States

•Conduct comprehensive assessments of security and privacy controls to determine their compliance with the NIST RMF.•Identify risks associated with security and privacy control failures and provide recommendations for mitigating identified risks and improving overall security posture.•Verify documented policies, processes and procedures accurately reflect operational practices. (e.g. System Security Plans (SSPs), Contingency Plans, Incident Response Plans, Privacy Impact Assessments… Show more •Conduct comprehensive assessments of security and privacy controls to determine their compliance with the NIST RMF.•Identify risks associated with security and privacy control failures and provide recommendations for mitigating identified risks and improving overall security posture.•Verify documented policies, processes and procedures accurately reflect operational practices. (e.g. System Security Plans (SSPs), Contingency Plans, Incident Response Plans, Privacy Impact Assessments (PIAs), and System of Records Notice (SORNS)).•Analyze and evaluate SOC 2 reports to confirm compliance and identify gaps in control implementation against the NIST SP 800-53 control set.•Coordinate with Information System Security Officers (ISSOs) and Information System Security Managers (ISSMs) to provide security solutions and interpretations of security policies.•Prepare and present clear and concise assessment findings to senior management, system owners, and stakeholders.•Maintain strong relationships with all stakeholders by providing continuous support related to assessment outcomes. Show less

• Conducted the required HIPAA Security Risk Assessment for the University of Maryland Medical System (UMMS).• Employed the NIST Cyber Cybersecurity Framework (CSF) to meet both the requirements of the HIPAA Security Rule and to advance the maturity of the UMMS Security Program.• Mapped the NIST CSF and HIPAA safeguards to the NIST SP800-53 control set.• Coordinated and led interviews with UMMS personnel of the target Electronic Health Records (EHR) systems to include, EPIC… Show more • Conducted the required HIPAA Security Risk Assessment for the University of Maryland Medical System (UMMS).• Employed the NIST Cyber Cybersecurity Framework (CSF) to meet both the requirements of the HIPAA Security Rule and to advance the maturity of the UMMS Security Program.• Mapped the NIST CSF and HIPAA safeguards to the NIST SP800-53 control set.• Coordinated and led interviews with UMMS personnel of the target Electronic Health Records (EHR) systems to include, EPIC, Meditech, and Varian• Supported the development of the HIPAA Security Assessment Report for each EHR system. Show less

•Cybersecurity lead for the New York (NY) Joint Utilities (JU) Reforming Energy Vision (REV) Cybersecurity and Privacy working group, facilitating the cyber and privacy content for the NY REV Supplemental Distributed System Implementation Plan (DSIP).• Lead multiple meetings with NY JU cybersecurity/privacy leads, to expand upon the common cybersecurity and privacy framework for the NY JU and Distributed Energy Resource (DER) providers.•Negotiated with NY utility cybersecurity/privacy… Show more •Cybersecurity lead for the New York (NY) Joint Utilities (JU) Reforming Energy Vision (REV) Cybersecurity and Privacy working group, facilitating the cyber and privacy content for the NY REV Supplemental Distributed System Implementation Plan (DSIP).• Lead multiple meetings with NY JU cybersecurity/privacy leads, to expand upon the common cybersecurity and privacy framework for the NY JU and Distributed Energy Resource (DER) providers.•Negotiated with NY utility cybersecurity/privacy experts, and Industry electricity sector cybersecurity subject matter experts to draft the final content for the NY SDISP filing. • Participated in multiple stakeholder engagements sessions to communicate the NY JU positon on cybersecurity and privacy related issues.•Information System Security Officer (ISSO) for Department of Defense (DoD), leading the development of enterprise security policies, and procedures, in support of the transition from the DoD Information Assurance Certification and Accreditation Process (DIACAP) to the Risk Management Framework (RMF).• Supported annual assessments using the Enterprise Mission Assurance Support Service (eMASS) tool.•Advised the Information System Security Manager (ISSM) on the transition from the DIACAP to the RMF.•Created and maintained existing information system security documentation including, System Security Plans (SSP), Incident Response Plans (IRP), and Contingency Plans (CP) in response to customer requirements and risk identification.•Managed the development, and maintenance, of system specific Plan of Action and Milestones (POA&Ms) to include the drafting of exceptions and waivers as appropriate. Show less