Matt Combs Email & Phone Number

San Antonio, Texas, United States

Primary Responsibilities: Provide technical support and apply expertise in assessing information system compliance with DoD and Air Force (AF) RMF standards. Design application capabilities. Notable Achievements•Assisted with Development direction + enhancements for the next 3-5 years of the Cloud Hosted CSAR/RMF-Pro Application•Authored a question and answer bank, complete with Help Text to assist personnel not familiar with RMF requirements to navigate the complexities of the process•Produced a CONOPS template, complete with instructions to provide to PfM and AO Staff•Created a 'Design Document' template that gathers all information the DevOps team will need to implement a change/create a new capability, such as user stories, expected outcomes, etc. •Created/edited RMF Templates to assist programs with completing their assessments •Created an IATT package in 15 days, which was later granted 6 months for testing•Provided input and guidance on System Acquisition within the 2AF, helping to shape a new process designed to catch possible issues early on in the Systems Acquisition phase•Provided feedback on the AF wide ITCSC, resulting in updated references and capabilities of the form

San Antonio, Texas, United States

(Laid Off)Primary Responsibilities; Create Policies and procedures for RMF assessments of Facility Control Systems (FCS) for all Defense Health Agency (DHA) facilities. Create and manage an Approved Products listing for the FCS. Provide reach back and RMF expertise to Facility ISSMs.

San Antonio, Texas, United States

(Bad fit)Primary Responsibilities; Conduct RMF assessments for Air Force logistics systems. Evaluate System Security Plans. Write and brief Security Assessment Reports (SAR) and Risk Assessment Reports (RAR)Notable Achievements• Trained Junior personnel how to assess controls• Provided eMASS capability training/brief to both Junior and Senior personnel• Assisted Senior Personnel in their Assessments

San Antonio, Texas Area

Primary Responsibilities; Performed independent validation and conducted assessments of NIST 800-53 security and privacy controls for the Force Development (FD) AO and associated training systems within eMASS. Create and manage policies, procedures and guidelines for the overall cybersecurity program under the AO. Provide MAJCOM Cybersecurity support for Air Force Base Enclaves.Notable Achievements• Led weekly meetings to streamline process improvements and train on procedural requirements• Participated in the senior-level conference tasked to reorganize Air Force Enterprise Policy inheritance packages, creating a standardized answers to various Controls/CCIs• Created a baseline Continuous Monitoring requirement to assist with FISMA annual reporting• Created and documented AO level STIG policies and guidance• Authored Risk Management policy to clarify reporting requirements, instructions on POA&M documentation and Risk Acceptance procedures• Provided eMASS developers with possible improvements that were later implemented AF wide

San Antonio, Texas Area

(Completed the reason I was hired, No upward mobility)Primary Responsibilities; Provide Cybersecurity support for systems and services hosted in the Defense Health Agency’s Application Virtualization Hosting Environment (AVHE). Manage Access Requests for systems within DHA. Notable Achievements• Completed a previously stalled DIACAP to RMF accreditation package in 4 months.• Utilized ITIL processes to update and streamline the GSCs Access Management Policies • Updated and maintained internal Information Assurance/Security Awareness training materials. • Sent to Defense Health Agency (DHA) HQ to assist with SIPRNet RMF accreditation.

Honolulu, Hawaii, United States

(Became overqualified, sought new challenges)Primary Responsibilities; Responsible for the completion of the C&A process for the PACAF Clinical Desktop (PCD) system. Provide cybersecurity oversight for all Medical Treatment Facilities (MTFs) under the PACAF Surgeon General’s area of responsibility.Notable Achievements• PACAF wide Command Cyber Readiness Inspection (CCRI) lead for medical systems• Created a vulnerability management process and implemented WSUS servers and Tenable NESSUS scanners to facilitate

Mcbh Hawaii

• Evaluated R&D systems for DIACAP Compliance• T1/T2 Helpdesk Support/System Administration• Managed inventory of all classified materials and IT hardware