I write security and compliance documentation for the assessor who will read it.

Policy sets, control mappings, and system security plan narratives for NIST SP 800-53, NIST SP 800-171, SOC 2, and ISO 27001.

CISSP. Six years in the Navy's nuclear propulsion program. Nine years of systems and network consulting.

Work Samples

• Configuration Management Policy

  A policy for a fictitious 60-person defense subcontractor, addressing NIST SP 800-171 Revision 2, family 3.4.

• NIST SP 800-53 Control Mapping

  134 Windows configuration settings mapped to NIST SP 800-53 Revision 5, including the 28 the baseline declines to apply.

• NIST SP 800-171 Security Requirement Mapping

  The same settings read against the requirements CMMC Level 2 assesses, derived from the 800-53 mapping.