Kenya Jackmon Email & Phone Number

Reston, Virginia, United States

• Conduct comprehensive assessments of security and privacy controls to determine their compliance with the NIST RMF.
• Identify risks associated with security and privacy control failures and provide recommendations for mitigating identified risks and improving overall security posture.
• Verify documented policies, processes and procedures accurately reflect operational practices. (e.g. System Security Plans (SSPs), Contingency Plans, Incident Response Plans, Privacy Impact Assessments… Show more
• Verify documented policies, processes and procedures accurately reflect operational practices. (e.g. System Security Plans (SSPs), Contingency Plans, Incident Response Plans, Privacy Impact Assessments (PIAs), and.
• Analyze and evaluate SOC 2 reports to confirm compliance and identify gaps in control implementation against the NIST SP 800-53 control set.
• Coordinate with Information System Security Officers (ISSOs) and Information System Security Managers (ISSMs) to provide security solutions and interpretations of security policies.

• Conducted the required HIPAA Security Risk Assessment for the University of Maryland Medical System (UMMS).
• Employed the NIST Cyber Cybersecurity Framework (CSF) to meet both the requirements of the HIPAA Security Rule and to advance the maturity of the UMMS Security Program.
• Mapped the NIST CSF and HIPAA safeguards to the NIST SP800-53 control set.
• Coordinated and led interviews with UMMS personnel of the target Electronic Health Records (EHR) systems to include, EPIC… Show more
• Coordinated and led interviews with UMMS personnel of the target Electronic Health Records (EHR) systems to include, EPIC, Meditech, and Varian
• Supported the development of the HIPAA Security Assessment Report for each EHR system. Show less

• Cybersecurity lead for the New York (NY) Joint Utilities (JU) Reforming Energy Vision (REV) Cybersecurity and Privacy working group, facilitating the cyber and privacy content for the NY REV Supplemental Distributed.
• Lead multiple meetings with NY JU cybersecurity/privacy leads, to expand upon the common cybersecurity and privacy framework for the NY JU and Distributed Energy Resource (DER) providers.
• Negotiated with NY utility cybersecurity/privacy… Show more
• Negotiated with NY utility cybersecurity/privacy experts, and Industry electricity sector cybersecurity subject matter experts to draft the final content for the NY SDISP filing.
• Participated in multiple stakeholder engagements sessions to communicate the NY JU positon on cybersecurity and privacy related issues.
• Information System Security Officer (ISSO) for Department of Defense (DoD), leading the development of enterprise security policies, and procedures, in support of the transition from the DoD Information Assurance.