Mohammed Shabaz Khan Email & Phone Number

● Conduct third party risk assessments to assist in determining the Administration for Children and Families (ACF) ability to protect the confidentiality, integrity, and availability of sensitive data ● Provide security guidance and support to ACF on the FISMA and NIST process● Manage security documentation deliverables and lead the Assessment & Authorization (A&A) team alongside the government ISSO to provide Security Packages (FIPS 199, System Description, System Environment & Component Inventory, Related Laws, Regulations, and Policies, Rules of Behavior, Privacy Threshold Analysis, Continuous Monitoring Plan, Interconnection Agreements, Business Impact Analysis, Contingency Plan, Contingency Plan Test Plan & Results, Risk Assessment Report, Designation Letters, Security Authorization Letter, Incident Response Plan, Configuration Management Plan)● Interview System Administrators to assist in generating custom reports and/or artifacts in support of the A&A process● Develop monthly BOD 18-01 reports in order to ensure client systems are in compliance with DHS mandates● Develop, review and update required security documentation including but not limited to System Security Plans (SSPs), Contingency Plans (CP), Plan of Action and Milestones (POA&Ms), Security Assessment Reports (SAR)● Conduct gap analysis and document reviews of NIST policy documents, and updating protocols and procedures resulting from new guidance● Work closely with IT and development teams in order to design secure infrastructure solutions and applications, facilitating the implementation of protective and mitigating controls.● Create and manage POA&Ms for assigned systems while conducting quarterly POA&M follow up meetings with system Technical Leads and System Owners to determine what security controls have been implemented and to ensure the identified risks have been mitigated accordingly

• Worked with Security Team to ensure compliance of application by monitoring results from testingand creating remediation strategies to address security concerns● Taught bi-weekly course to prepare individuals for the Security+ exam in an effort to provideindividuals with more security knowledge along with an added certification, therefor providingcustomer with more Security + certified employees● Utilized HP's Application Lifecycle Management (ALM) to track and monitor defects, create testdocumentation, test cases based on certain controls and develop test scripts to validate system andapplication requirements and communicating these finding with the customer● Drafted enhanced Detailed Functional Requirements (DFRs) documents to elicit business rules andfunctionalities associated with various reports and detail listings produced for managementinformation● Created new Design Requirement Specifications (DRS) documents, as well as new report mock-upsbased on changes in release-specific modifications● Developed Systems Development Lifecycle (SDLC) documents such as "As-Is" and "To-Be"business processes that involve eliciting process requirements and liaising with users● Conducted gap analysis to provide recommendations and feedback to modernize existing legacymainframe systems and as well promote efficiency within the group● Planned and executed recurring meetings (e.g., weekly status reports, technical progress reports) aswell as highlight key accomplishments and roadblocks to success● Developed web based metrics to manage requirements processes using IBM Rational RequisitePro● Maintained customer engagement to support business process flow, priorities, new requirements, and changes to existing requirements

Supported Program Management Office with end-to-end deliverable quality assurance activities,ensuring quality and standardization across all final work products and consolidation in a centralrepository● Worked with internal teams to obtain an in-depth understanding of the product and thedocumentation requirements● Produced high-quality documentation that meets applicable standards and appropriate for its intendedaudience● Wrote easy-to-understand user interface text, online help and developer guides; created presentationsfor customer TouchPoint collaboration meetings and for critical thread review (CTR) meetings● Created standard communication for SSA disability determination processes in order to streamlineand enhance the distribution of health and medical information and reduce the time it takes todevelop and disseminate health information● Developed data requirements with its prospective analysis and performed data mapping as needed● Prepared Logical Process and Data Models charts, ER diagrams and class diagrams to supportdocuments containing essential business elements● Created and managed project templates, Use Case templates, requirement types and traceabilityrelationships in Requisite Pro● Developed Systems Specifications documents in order to define the impact of the new requirementson the existing system, deliver requirements to the customer on time with confidence from leadershipand to reduce implementation time

Masters Of Applied Information Technology, Computer And Information Systems Security/Information Assurance

Bachelor Of Science, Biological Sciences