Mohammed Shabaz Khan Email & Phone Number

• Conduct third party risk assessments to assist in determining the Administration for Children and Families (ACF) ability to protect the confidentiality, integrity, and availability of sensitive data
• Provide security guidance and support to ACF on the FISMA and NIST process
• Manage security documentation deliverables and lead the Assessment & Authorization (A&A) team alongside the government ISSO to provide Security Packages (FIPS 199, System Description, System Environment & Component.
• Interview System Administrators to assist in generating custom reports and/or artifacts in support of the A&A process
• Develop monthly BOD 18-01 reports in order to ensure client systems are in compliance with DHS mandates
• Develop, review and update required security documentation including but not limited to System Security Plans (SSPs), Contingency Plans (CP), Plan of Action and Milestones (POA&Ms), Security Assessment Reports (SAR)

• Worked with Security Team to ensure compliance of application by monitoring results from testingand creating remediation strategies to address security concerns
• Taught bi-weekly course to prepare individuals for the Security+ exam in an effort to provideindividuals with more security knowledge along with an added certification, therefor providingcustomer with more Security +.
• Utilized HP's Application Lifecycle Management (ALM) to track and monitor defects, create testdocumentation, test cases based on certain controls and develop test scripts to validate system andapplication requirements.
• Drafted enhanced Detailed Functional Requirements (DFRs) documents to elicit business rules andfunctionalities associated with various reports and detail listings produced for managementinformation
• Created new Design Requirement Specifications (DRS) documents, as well as new report mock-upsbased on changes in release-specific modifications
• Developed Systems Development Lifecycle (SDLC) documents such as "As-Is" and "To-Be"business processes that involve eliciting process requirements and liaising with users

• Supported Program Management Office with end-to-end deliverable quality assurance activities,ensuring quality and standardization across all final work products and consolidation in a centralrepository
• Worked with internal teams to obtain an in-depth understanding of the product and thedocumentation requirements
• Produced high-quality documentation that meets applicable standards and appropriate for its intendedaudience
• Wrote easy-to-understand user interface text, online help and developer guides; created presentationsfor customer TouchPoint collaboration meetings and for critical thread review (CTR) meetings
• Created standard communication for SSA disability determination processes in order to streamlineand enhance the distribution of health and medical information and reduce the time it takes todevelop and disseminate.
• Developed data requirements with its prospective analysis and performed data mapping as needed

Masters Of Applied Information Technology, Computer And Information Systems Security/Information Assurance

Bachelor Of Science, Biological Sciences