Norris Carden

About Norris Carden

Lead Certified CMMC Assessor (LCCA)Certified CMMC Assessor (CCA)Certified CMMC Professional (CCP)Certified Information Systems Security Professional (CISSP)Certified Information Systems Auditor (CISA)Fortinet Security Professional (NSE1, NSE2, NSE4, NSE5)Lead Certified CMMC Assessor (LCCA) with 4.5 years experience performing CMMC and NIST SP 800-171 gap assessments. Also consulting to federal agencies and DIB contractors of all sizes on CMMC preparedness, NIST 800-53, SSP development, POA & M remediation, policy development and system scope.Governance – Experience evaluating existing and creating new information security policies that align with and support business objectives; are consistent with applicable laws and regulations; and align with a selected framework. Provided policy interpretation and consultation to business leaders and employees.Security Framework – Familiar with multiple frameworks, including CMMC, NIST 800-171, NIST CSF, NIST 800-53, CIS, COBIT and ISO 27002. Third Party Risk – Assessing 3rd parties to ensure privacy, confidentiality and data safeguarding controls for contract agreements in collaboration with business, legal, risk and purchasing.Internal Risk – Experienced in assessing projects and providing advice on applying security policies to meet business goals as well as governance, regulatory and industry defined requirements. Experienced in developing and performing tabletop exercises to help organizations evaluate their incident response, disaster recovery and business continuity plans.MSSP Operations - Managed MSSP firewall services including design, implementation, monitoring, changes, reporting and client communications.Security Architecture - Experience in security architecture review and planning, DMZ design, firewall review and implementation, IDS/IPS, email security, data loss prevention, encryption and much more.Specialties: Fortinet Fabric, data center relocation, information security auditing, risk assessments, risk analysis, tabletop exercises, disaster planning, security architecture, network architecture, FFIEC compliance, GLBA compliance, PCI compliance, security operations, vulnerability management, firewall management, email security, security training, sales engineering PKI.Fortinet NSE Xperts Summit 2022Fortinet NSE Xperts Academy 2017Fortinet Xtreme Team member 2015 & 2016

Experience

1. Cybersecurity Analyst Iv - Cmmc Lead Assessor

   Sentar Inc.

   Dec 2025 — Present

Education

• Defense Information School

  BBC 4-90, Public Affairs & Broadcasting

  1990 — 1990

• Tullahoma High School

  College/University Preparatory and Advanced High School/Secondary Diploma Program

  1979 — 1983

• University of Tennessee, Knoxville

  BS, Communications - Broadcast Management

  1983 — 1989

• Capella University

  Information Security

  2003 — 2005

Skills

• Commercial Photography
• Digital Photography
• Information Technology
• Television Producing
• Information Security Management
• Computer Security
• Senior Portraits
• Network Architecture
• Video Production
• Radio Broadcasting
• Pci Standards
• Portraits
• Fortinet
• Cisa
• Managed Security Services
• Security Management
• Risk Assessment
• Emergency Management
• Vulnerability Assessment
• Ffiec
• IT Audit
• Firewalls
• Photojournalism
• Networking
• Security
• Security Audits
• Servers
• Videography
• Television News
• Encryption
• Wedding Photography
• Information Security Consultancy
• Vulnerability Management
• Dlp
• Enterprise Network Security
• Cissp
• Information Security Awareness
• Ips
• Amateur Radio
• Information Security