Drew Bennett

Regulated Research Program Assistant @Office Of The Chief Information Officer

Champaign, IL, US

Conducted regulatory framework mappings between internal controls and NIST SP 800-171 and 800-53 totaling just over 250 controls- Designed, reviewed, and implemented new Entra Conditional Access policy framework with fifteen policies to comply with University IT standards and NIST 800-171 requirements- Worked with project team to draft technical components of SSP and Self-Assessor Workflow including 50+ statements of implementation and the collation of relevant artifacts from GCC High and other infrastructure- Worked with Cybersecurity Operations team to implement security tooling consistent with University IR workflows and establish logging flows through Splunk Cloud- Developed system network diagram with 30+ components and 40+ data flows.