Catherine Akombum

Information System Security Officer @U.S. Department Of Energy Doe

US

Conducted Privacy Threshold Assessment to determine if there have been any changes that might lead to PII collection and Privacy Impact Analysis.• Vast knowledge in all aspects of Security Authorization and Continuous Monitoring process using National Institute of Standard Publications 800-30, 800-37 Rev 2, 800-60, 800-53 Rev 5, 800-53(a) Rev 5, 800-171, FIPS 199, FIPS 200. • Experience in remediating vulnerabilities and defect fixes by working closely with development leads and engineers.(Emergency on-call ISSO).• Managing and ensuring information systems security is secured within my organization for systems that are under my care. • Conducting continuous monitoring, risk assessments, monitoring security compliance, practicing security training, and responding to security incidents. • Security Control Selection: Based on the categorization of the information system, I select security controls using NIST 800-53 Rev 5. Set up meetings with the common control providers to identify system-specific and hybrid controls and tailor the control based on the organization’s mission and needs. Work with developers, system administrators, and third parties such as vendors and Cloud Service providers (CSP) to ensure that the controls are implemented and document all approved controls in the SSP.• Assist with the development and maintenance of all necessary A&A documents.• Experience using the Risk Management Framework (RMF) to support the A&A process, including analyzing the development of supporting policies, procedures, and plans, designing, and implementing security controls.• I play a crucial role in safeguarding sensitive data and maintaining the integrity, confidentiality, and availability of information systems under my care.

University of Maryland Global Campus

Master of Science - MS, Cybersecurity Technology