David L. Cole

About David L. Cole

Information Systems Security Engineering Professional (ISSEP)Information Systems Security Architecture Professional (ISSAP)Certified Information Systems Security Professional (CISSP)Sixteen years of experience in the information technology industry. Strong technical, verbal, and written communication skills. Ability to work independently or work within a team environment. Detailed knowledge of multiple vulnerability scanning tools.Ability to conduct vulnerability scans, analysis, and risk mitigation.Ability to harden multiple OS platforms to DoD security standards (UNIX and Windows).Ability to design, secure, and manage network infrastructures.Detailed knowledge of business continuity management. practices.Detailed knowledge of DoD enterprise architecture and engineering security practices.Detailed knowledge of FISMA and supporting FISMA guidance.Detailed knowledge of DoD Assessment and Authorization Process.Detailed knowledge of Federal, DoD, and Air Force information management policies, directives, and instructions.Detailed knowledge of NIST information management guidance, including RMF and FIPS.

Experience

1. Afsc Industrial Depot Maintenance Security Control Assessor

   United States Air Force

   Oct 2021 — Present

   The Security Control Assessor (SCA) is the senior official having the authority and responsibility for the assessment of Air Force Information Technology across all AFSC Industrial Depot Maintenance (IDM) Industrial Control Systems (ICSs). Leads and provides direction to the Air Force Sustainment Center (AFSC) Security Controls Assessor Representatives (SCARs) to ensure security controls are properly implemented and assessed. Serves as the Subject Matter Expert (SME) of the Risk Management Framework (RMF) teams for IDM across AFSC ensuring the proper planning of cybersecurity requirements. Ensures security controls are implemented IAW the security plan and are assessed IAW the Security Assessment Report (SAR). Validates assessment results from others (e.g, SCAR or ISSM), performing hands-on, comprehensive evaluations of the technical and non-technical security controls for IT and determines the degree to which the IT satisfies the applicable security controls. Makes recommendation to the Authorizing Official (AFSC/EN) as to cyber risk acceptance.

Education

• Oklahoma State University

  Associate’s Degree, Information Systems Sciences

  1998 — 2000

• University of Phoenix

  Bachelor’s Degree, Business Sciences E-commerce

  2000 — 2002

• Norwich University

  Master’s Degree, Information Assurance

  2011 — 2013