Aidah B

About Aidah B

With a foundational education from Kaplan University in Management Information Systems, my career has evolved into a dedicated Cyber Security Analyst role at Kreative Technologies. Our team emphasizes quality and precision in safeguarding digital assets, leveraging my competencies in SIEM to enhance security postures.Strategizing risk management and deploying robust IT solutions, we strive for regulatory compliance and operational excellence. My passion lies in crafting and managing information security programs that align with the NIST 800 series and FedRAMP standards, ensuring the integrity of our cybersecurity initiatives.

Experience

1. Cyber Security Analyst

   Nfinity

   Apr 2022 — Present

   Develop, review, update and ensure Federal Deposit Insurance Corporation (FDIC) Assessment and Authorization (A&A) packages for federal information systems and networks within GRC tool CSAM are IAW current, FDIC policies, publications and NIST standards to satisfy/remediate Inspector General (IG) findings. •Initiate kick-off meetings to collect system information to assist in the categorization of assigned systems referencing FIPS 199 and NIST SP 800-60. •Work with Privacy Officer to ensure Privacy Threshold Analysis (PTA) and Privacy Impact Assessments (PIA) are completed thoroughly and correctly to give a system its privacy impact level e.g. low, moderate, high (SP 800-122).• Select and assist System Owners through control baseline tailoring/scoping, ensuring that the appropriate Operation, Management and Technical security controls securing all systems are tailored/scoped in accordance with assigned system categorization level referencing SP 800-53 rev 4 and FIP 200.•Coordinate security control evidence collection activities between System Owners/PoC and third-party assessment team during third-party assessment.•Perform in-house security control assessment, by conducting client interview, control examination, control testing and develop necessary security control assessment artifacts e.g. Security Control Testing & Evaluation (SCT & E), Security Assessment Report (SAR) and Security Assessment Test Plan adhering to NIST SP 800-53A, SP 800-115.• Develop and manage all system POA & Ms and Acceptance of Risk forms (Risk Waiver) from initiation to completion, satisfying ATO and continuous monitoring requirements. •Provide monthly Nessus Security Center executive level report to senior management, addressing current security posture/overview of vulnerabilities within assigned systems.•Utilize Tenable Nessus Network Security and WebInspect vulnerability scanners to identify system vulnerabilities and assist SO and team to mitigate findings for threat reduction.

Education

• Kaplan University

  Bachelor of Science - BS , Management Information Systems, General

• Kaplan University

  Bachelor of Science, Information Resources Management