Larry Owenz

About Larry Owenz

At SkyePoint Decisions, my role as an IT Security Control Assessor merges my Project…

Experience

1. IT Security Control Assessor

   Skyepoint Decisions, Inc

   Mar 2020 — Present

   Schedule kick off meetings with system owners to help identify assessment scope, system boundary, the information system\'s category and attain any artifacts needed in conducting the assessment. Create Requirement Traceability Matrix (RTM) and document whether controls being assessed passed or failed using NIST SP 800-53A as a guide. Develop Security Assessment Plans (SAPs) and Conduct assessment of security control selections on various Moderate impact level systems to ensure compliance with the NIST SP 800-53A. Conduct security control interview meeting and Artifacts gathering meeting with various stakeholders using assessment methods & objects of examine, interview, and test. Document assessment findings in a Security Assessment Report (SAR) and recommend remediation actions for controls that failed and vulnerabilities. Review A&A package items using NIST guidance for FISMA compliance such as the System FIPS 199 Categorization, e-Authentication Assessment, PTA, PIA, Contingency Plan (CP) and Contingency Plan Test (CPT) Perform vulnerability assessment of information systems to detect deficiencies and validate compliance using POA & M tracking tool.(CSAM) Request scans and later review the scan results for common vulnerabilities such as missing patches, weak password settings, unnecessary services not disabled, and weak configurations.