Loren Dethample Email & Phone Number

Lansing, Michigan

Contract to State of Michigan under the MDHHS as the Subject Matter Expert (SME) guidance to the MDHHS security team. The Senior Security Specialist will have comprehensive understanding of State and Federal Privacy and Security requirements including NIST 800.53 and IRS Pub 1075, CJIS, Mars-E 2.0 Compliance. Additionally, the Security Specialist will assist in the coordination of Privacy and Security related assignments needed to maintain State and Federal compliance.Responsibilities Include: Assist the MHDDS team as the Privacy and Security SME for the monthly, quarterly, annual and tri-annual security reports and deliverables needed to maintain compliance with State and Federal regulations. Provide security training and mentoring to the MDHHS team. Coordinate, participate, and/or facilitate meetings necessary to support technical and business needs related to Privacy and Security, PSP’s, and Compliance. Assist with internal and external security audits and assessments. Review of State PSP’s and Federal regulations for gaps in Privacy and Security Compliance. Participate as assigned with the review and recommendation of Security and Risk Assessments. Cooperate with leadership in identifying critical issues for Annual Privacy and Security Planning Provide support to project teams as assigned to support security compliance. Collaborate and assist with the alignment of security plans across all agency parties. • Accomplishments: Security - CMS Medicaid AuditSecurity – Federal RemediationSecurity - Federal Reporting Security - MARS-E 2.0 Compliance and ATC RenewalSecurity – State of Michigan and Vendor Risk assessment and response for agency applicationPrivacy and Compliance – Public accessible content requirementsAudit and Compliance – Audit requirements for State and Federal applications IRS audit and remediation guidance to state

Greater Detroit Area

Vendor risk management identifying and decreasing potential business uncertainties and legal liabilities regarding the hiring of 3rd party vendors for information technology (IT) products and services. Conducts initial assessment of all vendors to determine level of risk and ongoing compliance reviews processes and procedures to an external vendor, sensitive data may be transmitted, stored and processed on both company and vendor networks. Regulations such as the Sarbanes-Oxley Act (SOX), Payment Card Industry Data Security Standard (PCI DSS) and the Health Information Portability and Accountability Act (HIPAA) mandate that risk management policies extend to third-party vendors, outsourcers, contractors and consultants. Oversees compliance with privacy/security practices and consistent application of sanctions for failure to comply with privacy policies for all employees and business associates, in cooperation with the General Counsel, Business Relations Managers, and Procurement. Initiates, facilitates and promotes activities to foster information privacy and regulatory awareness within departments who require access to confidential information such as customer service and development. Reviews technology security practices in cooperation with technology professionals for purposes of determining that security and controls within the company’s systems are appropriate for protection of confidential information. Works with all personnel involved with any aspect of release of protected health information, for purposes of full coordination and cooperation under the company’s policies and procedures and legal requirements.Oversight of policies and procedures to address suspected or known security incidents.

Wichia, Kansas

Wichita, Kansas

Wichia Clinic

Wichita, Kansas

Wichita, Kansas

Derby, Kansas

Master'S Degree, Management Information Systems And Services, 4.0 Gpa

Voted Outstanding Student in MMIS program 2007

Ism, Information Security Management

Bachelor Of Science, Computer Information Systems, 3.8 Gpa

Associates In Business