Michael Welch Email & Phone Number

Chicago, Il, Us

Chicago, Il, Us

Mclean, Va, Us

Kansas City, Mo, Us

Working as a center of excellence for internal & external clients to build trust as well as partnering to navigate complex business challenges related to regulatory compliance requirements, cybersecurity requirements and the develop risk management solutions together.

Mclean, Va, Us

Managing Director of GRC and Strategy working with clients and partners globally. We are management and technology consulting firm that works with leading businesses and government to address critical cyber security, finance, technology, and business objectives. Organizations of all sizes turn to Morgan Franklin because we bring experienced, engaged professionals who are highly energetic and motivated to work with our clients in challenging, high-stakes environments. We hit the ground running and achieve results through what we deliver, and in how we deliver it. Morgan Franklin is a subsidiary of Vaco Holdings.

New Orleans, La, Us

CyberSecurity Instructor at Loyola University New Orleans HackerU Program

Brentwood, Tennessee, Us

CISO, Information Security Officer, Strategy, Planning, Cyber Security, Security Operations, Managed Services, GRC, Risk, Governance, Compliance, IAM.Vaco is a private-equity backed solutions company that provides consulting, managed services, staffing, and placement services globally. Established in 2002 by “Big 4” consulting veterans, Vaco now has over 40+ offices and has worked with over 9,000+ clients. We have over 6,000+ employees and been named to Inc. magazine’s list of fastest-growing private companies for the past 12 years. Vaco offers boutique services with global reach.

Kansas City, Mo, Us

Kansas City, Mo, Us

Factory/Site Acceptance Testing• Team lead for client engagements that involved Factory Acceptance Testing• Team lead for client engagements that involved Site Acceptance Testingv3 Control Upgrades and v5 Transition Project Management• Coordinate resources, plans, schedules, activities and budgets across DCS Controls (Emerson & GE) upgrades including the OEM Security Center for existing NERC CIP projects, this included acting as the compliance and cyber security controls engineer lead.• Coordinate resources, plans, schedules and activities across the generation fleet in preparation with the transition to v5/v6.• Development of a top-down, bottom up methodology to identify BES Cyber Systems across client’s fleet. Based on the outcome of the methodology, development of a road-map to meet compliance with the April 2016 compliance date for medium generation sites and April 2017 for low generation assets. The footprint of the assessment consists of over 75 generations sites, including wind, solar, thermal and control centers in three regions.• Attend and/or lead project meetings across multiple business units to identify expectations and potential gaps on the v5 Implementation Program• Report status update to upper management and communicate with implementation team to make sure the project is staying on track and within budget.• Participate in the NERC Technical Workshops• Participate with the Control Systems Security Working Group and Compliance Input and Enforcement Working GroupVulnerability Assessments• Team lead for the Cyber Vulnerability Assessments CIP-005 and CIP-007 compliance using tools like Nessus, Nipper, Qualysis, SecuScan and custom scripts.• Supported Security Patch Management for Generation Plants with Emerson and GE Distributed Controls Systems

Charlotte, North Carolina, Us

Hired as a contractor to provide Program Management as the company is shifting the NERC CIP Requirements into Control Groups to better sustain compliance supporting multiple functions in RFC, SERC, TRE and WECC. • Develop and track mitigation plans for Possible Violations identified during audits or Self Reports• Develop and/or consolidate process and procedures in order to sustain compliance.• Provide comments, guidance and interpretations of new standards, Request for Interpretations (RFI) and Compliance Application Notices (CAN)• Participate on the SDT Plus List• Prepare Subject Matter Experts for Audit Preparation

Working as an independent contractor in support of NERC CIP Compliance and Sustainability:• Conducted 2-Day Training Course on Auditing NERC CIP Standards for professional services firms • Providing insight to clients on the direction of the NERC CIP Standards• Conducted Cyber Vulnerability Assessment per CIP005 R4 and CIP007 R8• Provide guidance on Part A and Part B Technical Feasibility Exceptions• Development of an eLearning NERC CIP Awareness Course• Prepared roadmap of Compliance for a utility that will be deemed a Critical Assets based on Bright Line Criteria.• Part of team to conduct a review of NERC 693 Standards for GO/GOP

Senior NERC CIP Security and Compliance Analyst

Evaluation of NERC CIP002-009 standards and assist client to meet compliance; focus of assignment was the development of Methodologies, Policies and Procedures

CISSP, CISM, CISA, IAN, CHS-III

Chief Information Security Officer (Ciso) Certificate Program

Master Of Business Administration (Mba)

Bachelor'S Degree, Criminology

Ba, Criminal Justice