Randy Nethers Email & Phone Number

Keene, Nh, Us

Keene, New Hampshire, United States

• Recently assisted a company in recovering from a ransomware attack, restoring systems from offsite backup, rebuilding their VMware cluster (from v6.0 to v7.0), installing new Cisco switches, setting up new Windows Server 2022 systems, and linking the company Active Directory to Azure.• Recently installed Sophos XGS firewalls for a small company to replace their old Cisco ASA systems. Also, set up an Aruba-based wireless network for the office.• Recently provided services to a previous employer:o Linux administration and infrastructure adviceo Finished up a new Nagios-based system and monitoring scheme o Assisting CISO to comply with GDPR and 201 CMR 17• Created on a part-time basis Information Security policy and procedure documentation on behalf of the organization that audited Onpoint Health Data for the states of Rhode Island and Connecticut state health departments• Created policy and procedure documentation based on the client company’s needs, using industry-standard frameworks, including NIST SP800-53Rx, Center for Internet Security v6 & v7, HIPAA/NIST SP800-66R1, NIST SP800-171 & ISO 27001/27002• Worked with the organization’s client company’s information security program creation, assessments, and audits (internal/external), managed IT risks, secure data, identity, and access management, network security• Developed and Maintained InfoSec risk analyses in several methodologies, including NIST SP800-30r1, FAIR, and ISO 27005 (based on Talabis & Martin (Information Security Risk Assessment Toolkit)).

Keene, New Hampshire, United States

Permanent Substitute Teacher 7/2022—6/2023 • Taught state-mandated computing competency courses (Microsoft Suite and Google Workspace)• Taught CompTIA network+ and security+ curriculum as part of the Keene High School career technical education (CTE) program• Developed the following year’s CTE program for network and cybersecurity offerings.o CompTIA Network+, Security+ courses, and Cisco CCNA • Assisted transition to the new instructor.

Augusta, Maine, United States

• Volunteer position: part of the Master’s degree program• A 2-year-long case study focused on the organization’s cybersecurity stance • Providing direction and leadership for MSEA’s board of directors for an information security program• Created Business continuity, disaster recovery, and incident response plans• Performed information technology risk assessment • Presently assisting MSEA to conform to good cybersecurity practices using NIST CSF

Tewksbury, Massachusetts, United States

• Took over the IT department after a devastating ransomware attack• Moved company (500 users) from outdated email service to Microsoft Exchange 365• Led implementation of SSO using Azure Active Directory, new firewall/anti-malware systems, VPN for remote work• Provided leadership, supervision, and management to two help desk/junior system administrators• Directed replacement of 80% of all employee computing equipment• Developed a $500,000 budget, with the potential of saving 5-10% from the previous year• Implemented a written information security program to comply with 201 CMR 17 using NIST CSF o Created incident response/disaster recovery/business continuity planso Created and implemented a Security awareness training programo Created ITIL-based change management plan and tracking system (using Freshdesk)• (Company went out of business)

Greater Boston Area

• Primary for Linux-bases clusters (>100 hosts) supporting Oracle DBs, applications and Genesys• Assisting upgrading four 20+ host (85 total) from VMware 5.5 to 6.5• Assisting management of 2000 Terabytes in three EMC clusters in three locations (USA/EU)• Primary for EMC Unity SAN & Avamar/Data Domain backups & Replication• Windows Server 2003-2016 and Active Directory Administrator• Implemented Nagios XI system for monitoring over 1,000 nodes• In the processes of setting up SIEM systems (Splunk)• Lead for team of six & involved in staffing decisions• Developed Security Awareness program for the company• Developed and taught ITIL foundations certification courses for IT and IS staff • Established cyber risk analyses and gap analyses between the present state and desired state using 201 CMR 17, GDPR & PCI-DSS • Helped to develop employee awareness training materials as part of information security package• Developing with VP of Infrastructure and CTO implementation of ITIL (Service Operations) processes • Assisting CTO/CISO to meet PCI-DSS v3.2.1/HIPPA/GDPR/201 CMR 17 data security requirements o Risk assessments Incident response planningo Business continuity planning/DR Policies/procedure

Nashua, Nh

• Created customer-facing white papers, best practices, and video presentations published on Dell Tech Center (support.dell.com) for PS and SC Series equipment • Created training materials for Dell World 2015 & 2016 for PS Series equipment• Papers and video subjects pertained to Dell PS and SC Series equipment with RHEL6 & 7 and SLES12 operating systems and Veritas Storage Foundation Suite. • Laid off with EMC acquisition

Portland, Maine

- • Hands-on IT manager with four employees and up to 5 contractorso An annual budget of >$500,000o Managed two employees and upwards of five consultantso Reported to CIO• Spearheaded the company’s Information Security Strategy (ISS) with the CIO & Board of Directors• Created an Information Security Program (ISP)o Wrote Policies, Standards, Guidelines, and Procedureso Directed implementation and implemented dozens of administrative, physical and technical controls• Collaborated with Onpoint and MN DOH to become a qualified entity with Centers for Medicare and Medicaid (CMS) in a two-year effort• Worked with CMS auditors to achieve compliance using FIPS-200 moderate impact using NIST SP800-53R4• Collaborated with auditors to meet State requirements for other clients (state health departments)• Developed, implemented and tested business continuity and disaster recovery plan• Architected and modernized company infrastructure o Network Appliance SAN/NAS w/300 TB storage capacity in prod/150 TB in devo Implemented blade technology, VMware, and UTM Firewallingo Two offices & two data centers (production & dev/test/DR)• Created and used an ITIL-based ITSM/CSI for excellent internal customer serviceo Included asset management, media management, regular risk and vulnerability assessment by internal and external evaluations• Started company with less than 90% uptime in production and no maintenance plan• Left company with 100% uptime during the last three years• Regular maintenance plan and under 20 hours/year planned downtime • Installed/used JIRA/Confluence/Hipchat for day-to-day ITSM (2013-2015)

Burlington, Massachuests

I participated as part of the Nokia Store operations group, managing Nokia’s worldwide application store. The team handled the production, staging, development sites and disaster recovery sites. - I served as a Tier 3 support and troubleshooter in a three-tier architecture using Oracle/Tomcat, JBOSS, PHP/Apache/Red Hat. - I designed and implemented their NAGIOS monitoring infrastructure for all environments. - I wrote the tier one and two support ‘cookbooks’ for the Bangalore, India support team. - I participated in and later lead the ITIL change-control team. - I wrote and maintained scripts to parse logs, searching breaches and used for KPIs. - Using KPIs, I created collateral for use by executive management and at shareholder meetings

Master Of Science - Ms, Cybersecurity, 4.0

Master's of Science in Cybersecurity with a certificate in Project Management.

Bachelor'S Degree, Information Systems/Cybersecurity, 4.0

Activities and Societies: Graduated April 2018, Summa Cum LaudeA Bachelor's of Arts in General Studies, focusing on Business Information.