Patrick Brefo Frimpong

Security Control Assessor @U.S. Department Of Homeland Security

Washington, DC, US

Interview key stakeholders to determine security controls implementation.• My secondary tasks were to Develop Plan of Action and Milestones (POA & Ms) for identified vulnerabilities; manage and track POA & Ms and their remediation using the FISMA reporting tool, Cyber Security Assessment and Management (CSAM); and provide federal management with weekly briefs.• Remediate system vulnerabilities IAW STIGS and DoD policies• Executes Security Control assessment plan by following provided assessment procedures, collecting and analyzing evidence, and documenting steps taken and findings noted.• Reviews completed STIG(s) checklist.• Performs/reviews compliance and vulnerability scans.• Ensures all findings are mitigated.• Verifies all open findings are entered into the system POA & M with a mitigation plan.• Notifies ISSO of all discovered findings.• Develops Security Assessment Plans.• Review allocated Security Controls.• Review implementation data for all Security Controls including enhancements.• Performs Interviews, examination, and testing of systems with System Owner and/or engineers.• Developing a Security Assessment Report for management providing residual risk statement, impact, and suggested corrective actions.• Makes recommendations/brief the Authorizing Official (AO)