Johnathan Coleman, Cissp Email & Phone Number

A small, vendor neutral consulting business specializing in Information Security Risk Management, including Risk Assessment, Analysis, Testing, Regulatory Compliance and Organizational Resiliency Planning. Supporting the Office of the National Coordinator for Health IT (ONC) as Program Manager and SME for several Standards and Interoperability projects, including Clinical Decision Support (CDS) for the CDC's Opioid Prescribing Guideline, and Data Tagging for Social Determinants of Health. Participates as an elected Co-chair for the Health Level 7 International (HL7) Community Based Collaborative Care (CBCC) Work Group.Supports the Defense Health Agency (DHA) Cybersecurity Division with SME support for cyber security policy, including support for participation in the Trusted Exchange Framework and Common Agreement (TEFCA).Provides Security and Privacy policy and technical subject matter expertise to a variety of healthcare clients as part of their ongoing risk management and regulatory compliance activities.

Serving as Program Manager for a number of Standards and Interoperability projects, including CDS for the CDC's Opioid Prescribing Guideline, and Data Tagging for Social Determinants of Health. Served as the S&I Framework Coordinator for ONC's Office of Standards and Technology and Initiative Coordinator for several S&I Initiatives, including Data Segmentation for Privacy (DS4P), Prescription Drug Monitoring/Health IT Integration (PDMP/HITI), Data Access Framework (DAF), electronic Long Term Services and Supports (eLTSS), and Data Provenance. Have been providing support to ONC since 2005, as part of the Health IT Standards Panel (HITSP), facilitating the EHR Lab Reporting and Security and Privacy Work Groups.

Co-Chair for the CBCP WG at HL7 International. Responsible for facilitating development of Health IT security, privacy, and other interoperability standards including Data Segmentation for Privacy (DS4P), Data Provenance, eLTSS, and implementation guides based on CDA and FHIR specifications.

Coordinate activities of the S&I Framework in conjunction with the ONC/OST leadership at HHS, and support activities to the Federal Advisory Committees (HIT Standards Committee, HIT Policy Committee). S&I is a collaborative community of participants from the public and private sectors who are focused on providing the tools, services and guidance to facilitate the functional exchange of health information. The S&I Framework uses a set of integrated functions, processes, and tools that enable execution of specific value-creating initiatives. Each S&I Initiative tackles a critical interoperability challenge through a rigorous process that typically includes: ◾Development of clinically-oriented user stories and robust use cases ◾Harmonization of interoperability specifications and implementation guidance ◾Provision of real-world experience and implementer support through new initiatives, workgroups and pilot projects◾Mechanisms for feedback and testing of implementations, often in conjunction with ONC partners such as NIST

Contractor to the Office of the National Coordinator for Health Information Technology (ONC). Projects support Office of the Chief Privacy Officer (OCPO), Office of Standards and Technology (OST) and Substance Abuse and Mental Health Services Administration (SAMHSA). Serve as Initiative Coordinator for the following initiatives:◾ Data Segmentation for Privacy◾ Data Provenance ◾ Prescription Drug Monitoring Program / Health IT Integration

Instructor, Instructor Trainer, Researcher and on-site Implementation Support on behalf of the Software Engineering Institute / CERT at Carnegie Mellon University. Primary focus is in Risk Management, including:◾ OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation); Certified Instructor and Instructor Trainer for SEI/CERT◾ MAAP (Mission Assurance Analysis Protocol)

◾ Participated and led a number of client-facing technical and non-technical healthcare security engagements, including HIPAA Security compliance reviews.◾ Developed and delivered risk analysis training for Military Health System (MHS) Medical Treatment Facilities at various locations in the US, Europe and Pacific regions.◾ Served as Facilitator for the Security, Privacy and Infrastructure Technical Committee and Co-chair of the Security/Privacy Tiger Team for the Health Information Technology Standards Panel (HITSP)

Regional manager for WareOnEarth Communications, a Defense Contracting company. Responsible for program management of a $30 million Information Security Contract with the DoD’s High Performance Computing and Modernization Office through SPAWAR, the Space and Naval Warfare Center. Also appointed as the ISSO responsible for managing the C&A process of a newly developed security system for the US Postal Service and the Social Security Administration.

Commissioned in to the British Army after graduauating the Royal Military Academy, Sandhurst, Mr. Coleman held various NATO and British Army positions engaged in the engineering, installation, and operation of deployable secure wireless communication facilities. He received post graduate training and has hands on experience with configuration and installation of secure WANs for voice and data (using digital bearers linked by satellite) and in a wide range of communications systems. International experience includes deployment with the Multi-National Division Communications Headquarters for Sector Southwest in Bosnia Herzegovina, tasking in Sardinia, Cyprus, and training for duties in Northern Ireland. Mr. Coleman was trained and certified as a Cryptographic Equipment Custodian and IT Security Officer.

Beng, Aeromechanical Systems Engineering

Beng, Royal Military Academy, Sandhurst