Robert D. Ashcraft

About Robert D. Ashcraft

I am a Grandfather Cybersecurity and CMMC Expert with IT advisory and leadership experience, holding seven prestigious certifications: CCP, PA, CISA, CGEIT, CRISC, CCSA and CHSP. As the CEO, President, and IT Advisor for Regulatory / CMMC Environments at CMMC Solutions, I oversee the CMMC, ITSOX, Cyber-IT audit, governance, business continuity, fraud/risk, and cyber security controls for various regulated companies in banking, education, insurance, utility, and commercial sectors. I also assist on the Accreditation Board on the Governance Committee for the DoD\'s CMMC, ensuring the quality and consistency of the assessment process and standards.My mission is to help organizations achieve resilience and compliance in the face of cyber threats and regulatory requirements. I have a proven track record of success in designing and implementing CMMC assessment and continuous compliance models, as well as leading organizational resilience and growth initiatives. I have also contributed to the development of the OSCAL project with NIST and served as a Board Member and Outreach for the President’s Community Resilience Panel. I have a strong background in enterprise architecture, project management, cloud technologies, product definition and performance, financial leadership, and market analysis. I am a skilled team builder who can train and coordinate project teams, drive compliance with fraud and risk regulations, and deliver profitable project success by unifying governance, risk, regulations, and people.

Experience

1. Partner, President IT Advisor for Regulatory Cmmc Environments

   Cmmc Solutions

   Apr 2005 — Present

   Key area of responsibilities include oversight for CMMC, ITSOX, IT audit, governance, business continuity, fraud/risk, cyber security and compliance controls for various regulated companies for achieving resilience (banking, education, insurance, utility and commercial accounts). Assisting on the Accreditation Board on the Governance Committee for the DoD\'s CMMC. Management of risk and audit staff on accounts. Primary accountability is auditing the IT specific controls for the CMMC, Cloud, virtualized environments, replication, mainframe, DR/BCP, UNIX/AIX/LINUX and Windows applications, networks and infrastructures. Additional concerns are assessing the risk and governance controls to reduce their exposure to the regulatory aspects, as well as, knowledgeable of their architecture / infrastructure to be flexible enough to interact with current risk and governance corporate personnel. Ability to create and write audit programs, test scripts, narratives, risk assessments, governance, implementation reviews, policies and procedures. Providing the maximum 75% acceptance usage rate for external audit firms, which results in reduction of external audit firms resources, billing hours, and on-site time. Integrating vendor’s Disaster Recovery and Business Continuity plans / programs, while maintaining company BCP, Risk and Governance regulated standards and the associated resilient analysis that provided improved workflow processes for client’s teamwork environments.

Education

• Emmaus High School

  HS, Math

• Beaver College

  Post Graduate work, Information Sciences

• Kutztown University of Pennsylvania

  BS, Mathematics and Computer Science

Skills

• Glba
• Sox 404
• Sas70
• Information Security Management
• Crisc
• Sox Compliancy
• Strategic Planning
• Enterprise Risk Management
• Governance
• Business Process Improvement
• Security
• Iso 27001
• Software Documentation
• Internal Audit
• Fraud
• Cisa
• Coso
• Analysis
• Cobit
• Sarbanes-Oxley
• Financial Risk
• Business Continuity
• Computer Security
• Aml
• Project Management
• Program Management
• Banking
• Risk Management
• Disaster Recovery
• Cissp
• Auditing
• Process Improvement
• Pci Dss
• Access Lists
• Operational Risk Management
• Operational Risk
• IT Audit
• Internal Controls
• Risk Assessment
• Sarbanes-Oxley Act