Suzi Mccoy Email & Phone Number

Lebanon, Tn, Us

Lebanon, Tn, Us

Boca Raton, Florida, Us

-Responsible for completing customer orders correctly and within the quoted time line using laser copiers/printers, creating documents using Microsoft Office software and Adobe Photoshop.-Responsible for building ongoing customer relationships and becoming a trusted advisor by utilizing advanced selling skills and knowledge to meet the customer's needs.

- Created list of active user accounts for terminated employees using Access to compare active user accounts to a list of active employees from HR. User account data collected from SQL, Active Directory, and Merchant software program.- Created Excel worksheets listing user accounts and permissions collected from Merchant software program. Sorted data based on menu name and permissions.

Worked at CHS, Mapco, and various other locationsVarious:- Reviewed company needs and implemented group policies in Active Directory on Windows 2003 server.- Setup desktops with various software (Lotus Notes Client 6, MS Office 2003, Windows XP, AutoCAD, MS Anti-Spyware)- Migrated users from Exchange 5.5 to Exchange 2003.

Franklin, Tn, Us

- Using Excel compared the known valid security settings to the current security settings to verify the company was in compliance with the Sarbanes-Oxley section 404 (Internal Controls for IT) standards.- Worked with IT department and business owners to test security using user accounts with various permissions from admin to none.- Documented exceptions and recommended solutions.- Retested key controls after Ernest and Young completed their audit.

Franklin, Tn, Us

- Trained and assisted employees with maintaining user accounts on HCA systems after CHS bought the Triad hospital group. Hospitals remained on the HCA systems until they were migrated to the CHS systems.- Created a self-audit process to review user accounts on the AS400s, Microsoft Active Directory, and Novell NetWare. - Created an Access database to compare user account data from the various systems to a list of employees from HR. - Created an program that could disable a user account across all of the AS400 systems automatically. Used the program to make mass updates to user accounts.

Rockville, Md, Us

- Analyzed in-scope audit controls of various business segments, and developed tests to evaluate the control functions based on government standard NIST 800-53.- Reviewed and tested current network server security settings, documented discrepancies, and recommended changes.- Performed penetration testing and vulnerability scans using MBSA, NMAP, Retina, Nessus, and Kismet.

Nashville, Tn, Us

- Using Excel compared the known valid security settings to the current security settings to verify the company was in compliance with the Sarbanes-Oxley section 404 (Internal Controls for IT) standards.- Key controls that were evaluated were network access, VPN access, firewall settings, active domain accounts, backup procedures, and disaster recovery scenarios.- Documented exceptions and recommended solutions.

Payson, Ut, Us

- Worked at HHS (Health and Human Services), CMS (Centers for Medicare & Medicaid Services), DOJ (Department of Justice)- Analyzed in-scope audit controls for various government and private organizations, and developed tests to evaluate the control functions based on government standards NIST 800-53, SAS70, and OMB A-123.- Reviewed and tested current network server security settings, documented discrepancies, and recommended changes.- Developed risk assessments and system security plans for major applications and general support systems.

Bloomfield, Ct, Us

- Using a list of employees and their system access, created an Excel permissions matrix based on job description. Reviewed matrix with management and finalized a list of authorized permissions for each job description.- Worked with IT group to create Role Based Access Controls (RBAC) for each job description. For each user, removed permissions that were assigned manually, and assigned the user to the appropriate role.- Downloaded a list of systems and the ports that were open on each one. In Access compared the open ports to an authorized list of open ports for each server. Reviewed discrepancies with management and discussed course of action (disable port or add to authorized list).

- Reviewed and updated Sarbanes-Oxley section 404 (Internal Controls for IT) audit documentation for manufacturing warehouse.- Reviewed and corrected SQL 2000 database errors to prevent warehouse production line from stopping.- Created reports using Crystal Reports for a doctor’s office. Data used for the reports was stored in an Oracle database.

- Verified implementation of Sarbanes-Oxley section 404 (Internal Controls for IT) of multi-million dollar insurance company. - Evaluated and documented internal controls focusing on network access, VPN access, firewall settings, active domain accounts, backup procedures, and disaster recovery scenarios.- Identified exceptions and recommended solutions for management.

Nashville, Tn, Us

- Created Transact-SQL queries on the RSA ACE SecurID server to create reports detailing active accounts and cards assigned to each account, cards or accounts about to expire, active accounts for terminated employees, and accounts and cards assigned to individual locations.- Created and implemented program to grant hospital security coordinators administrative permissions for the SecurID accounts and cards assigned to their location. Reduced turnaround time for SecurID account and card setup, permission changes, and password resets by 85% at each location. Reduced corporate SecurID workload by 75%.- Identified user account discrepancies on the mainframe, AS/400, Security Access Form (SAF) database, and ACE SecurID server. Modified accounts to achieve compliance with Sarbanes-Oxley section 404 (Internal Controls for IT) and HIPAA standards.

Us

- Recommended and implemented a Cisco PIX firewall to replace the Symantec Enterprise Firewall. Purchase of one more year of support for all of the Symantec Raptor firewall systems was equivalent to the cost of purchasing new Cisco PIX firewalls for both the production and test environments.- Maintained Symantec Raptor firewalls for the production and test environments. Analyzed Symantec Raptor Firewall logs, recommended changes and modified firewall rules approved by management. Used firewall logs to locate virus and worm activity. Used knowledge of protocols to stop virus and worm activity from spreading to other systems and locations.- Maintained SurfControl Webfilter and Microsoft Proxy server by updating which websites users were allowed to view based on management decisions.

- Relocated company network and employees in one weekend. Company was sold and required to move all equipment and employees in one day.- Managed servers and network equipment for headquarters and remote locations (Tokyo, Manila, London, and Toronto). Equipment was Cisco IP telephone system, Cisco routers, Cisco switches, Cisco PIX firewall, and Cisco VPN concentrator; Windows NT, Windows 2000, and Red Hat servers; server room UPS system, and MS Exchange 2000 server.

Us

Randolph Afb, Tx, Us

Bachelor Of Science, Management Information Systems

Associate In Applied Science, Information Systems Technology