Natasha Johnson

About Natasha Johnson

At CDO Technologies, my role as an Information System Security Engineer merges a…

Experience

1. Information System Security Engineer

   CDO Technologies, Inc.

   Jan 2024 — Present

   Manage enterprise level Risk Management Framework Authority to Operate packages within eMASS creating documents such as System Security Plan (SSP), Security Assessment Report (SAR), Contingency Planning, Incident Response Plan, and Plans of Actions and Milestones (POA & Ms) Establish security controls to ensure protection of client systems conducting risk and controls assessments per NIST 800-53, Rev.4 and Rev 5. Develop, maintain, and assist in publishing RMF / security audits and inspection checklists. Create and maintain artifacts, control implementation details, policies and procedures and technical documentation while ensuring the technical accuracy of all evidence provided for RMF packages. Perform risk and vulnerability assessments in systems and applications utilizing ACAS/Tenable Nessus. Monitor relevant STIGS, policies, memorandums, and regulations for changes that may affect the system. Monitor DISA, CISA, and other authority repositories for relevant security bulletins and alerts. Review and implement current applicable assessment and authorization (A&A) documentation in compliance with DoD Cybersecurity policy and agency guidance, including DoD 8500 series, ICD 503,CNSS 1253, and NIST special publications.

Education

• Aiken Technical College

  Information Technology