Wayne Burgo

About Wayne Burgo

Supporting the Department of Defense (DOD) Defense Health Agency (DHA) DoD Information…

Experience

1. Senior IT System Integration Analyst

   SAIC

   Oct 2021 — Present

   Subject Matter Expertise to system and application sites under the purview of DISA Joint Service Provider (JSP) in adherence to the Risk Management Framework (RMF), National Institute of Standards and Technology (NIST) Special Publication 800-37 (Feb 2010, as amended) and NIST Special Publication 800-53 (current edition) for DoD IT Systems. Evaluate and supports the documentation, validation, assessment, and accreditation processes necessary to ensure that information technology (IT) systems meet the organization’s information assurance (IA) and security requirements. Participates in the definition of organizations’ desired state and risk thresholds and analyzes actual state information to assess compliance. Work with agency leaders to codify strategic cyber objectives into doctrine, policies, and procedures that can help meet defined objectives. Evaluate computer applications, software, or specialized utility programs to determine if software assurance best practices are followed. Maintain compliance of custom-built software against stated security policies using code-scanning approaches. Gather the information necessary to maintain security and establish functioning external barriers, including firewalls and other security measures. Review systems to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes, and document upgrades. Maintain responsibility for managing Cybersecurity risk from a business and agency perspective. Identify organization risks, prioritize those risks, and maintain a risk registry for escalating and presenting those risks to senior leadership.