Jane Bernat
Sp Cybersecurity Lead @Aci Federal
Signup · Get unlimited contacts
WORK HISTORY
Sp Cybersecurity Lead @Aci Federal
SP Cybersecurity Lead for the Army’s Integrated Pay and Personnel System IPPS-A. Developed cybersecurity assessment processes to support Interim Authority to Test (IATT) and Authority to Operate (ATO) efforts for both Unclassified and Secret systems back on schedule. Granted one of the first ATOs for a system integrating the DoD mandated Financial requirements into the IPPS-A RMF security package of 746 security controls. Worked with NETCOM to ensure DoD Tier 1 inheritance packages reflected the 290 controls added by DoD Financial requirements and worked with DISA on multiple inheritance packages to support transition to RMF. Streamlined IPPS-A’s model for securing individual Operating Environments using DISA Security Technical Implementation Guides (STIGs) creating a baseline set of STIGs aligned to IPPS-A build and COTS default settings. Using this approach cut the time to complete DISA’s security compliance process by 50% or more. Leading efforts for deployment of the Cross Domain Solution to connect unclassified and classified systems achieving phase 1 security approvals with DISA and currently working with the DISA team on phase 2 activities to include filter development. Working with DISA to develop detailed implementation and collaboration strategies for implementation of Host Based Security Services (HBSS) across 1700 virtual operating environments supporting 4 operating environments. Identifying supplemental security services to support IPPS- FISCAM compliance based on identified gaps in HBSS services. Working coordination for implementation of Cybersecurity Service Provider services and implementation for Splunk, Audit Vault, Oracle Database Firewall to support the range of audit and alerting services to support incident resolution and response for O&M, Financial, Privacy, Classified, and Malicious Incident identification, triage, reporting, resolution and recovery capabilities.
EDUCATION
Georgetown University
Master's degree, Technology Management
Joint Military Intelligence College (now NIU)
PGIP-R, Strategic Intelligence
ABOUT JANE BERNAT
More than 35 years “hands on” delivering and managing solutions for the Department of Defense both as a contractor and as a reservist. Diverse background as a systems engineer, delivering and maintaining secure systems at multiple classification levels. After completing the initial transition from DIACAP to RMF for 3 Defense Health Agency systems, the first formal RMF ATOs achieved for DHA, transitioned to support the Army Integrated Personnel and Pay System (IPPS-A). As the SP Cyber Lead. Designed and implemented a merged approach to build RMF authorization packages for IPPS-A unclassified and classified systems, leveraging efficiencies for common controls and resulting in approval of one of the first RMF Authority to Operate (ATOs) granted with overlays including the DoD Financial requirements (FIAR) released in April 2016 adding more than 290 controls to the authorization package for a total of 746 controls. CISSP with expertise in information security with more than 15 years supporting and executing Certification and Accreditation (C&A) activities within the US Intelligence Community. Led and developed models to support accreditation under DCID 6/3 with transition to ICD 503. Expertise includes ISO 27001 certification, achieving initial ISO 27001 certification for a primary client. Technical lead and primary author for an in-depth study delivered to NGA in 2009 detailing methods for processing untrusted data into a trusted environment. Applying lessons learned in ICD 503 transition to DIACP-DIA RMF transition, successfully obtaining initial RMF ATOs for both DHA systems and Army ERP systems. Specialties: Computer Security, System Integration, Agile, ISO 9001, ISO 27001, ITIL Foundation, ICD 503, NIST, DCID 6/3, DIACAP, DIA RMF, ACAS, ESPS, eMASS.Certifications: CISSP, CISM, CAP, PMP
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.