Fattis N. Mann

Sourced the BISO with hand-picked cybersecurity practitioners who provided an alignment of the enterprise-compliant cybersecurity program and architecture for a government and publicly-traded company. They aligned the company's nine business units (BUs) and two sectors worth $7 billion in revenue with program-specific security, risk, and resiliency requirements.

Some of the program-specific security management goals and technical controls required:
• Building an enterprise cybersecurity champion program, leveraging 60 BU-assigned security champions to attend monthly sessions with security updates on business requirements per LOB
• Establishing developer or program-appropriate network micro-segmentations, leveraging software-defined data centers, VMs, and AD groups to enable the business-compelled exception management use of non-enterprise standard apps, open-source software, or unique internet URL access
• Developing a business resilience program, which involved conducting a business impact analysis (BIA) to determine the program app recovery time and point objectives (RTOs/RPOs) and developing and testing the disaster recovery plans (DRPs) for validation by tabletop, test, and exercise rehearsals

Developed a methodology for identifying which of the thousands of contracts had a contract line item number (CLIN) containing requirements for cybersecurity services. A cyber review is done to provide customers with information on these services' cyber hygiene and the health of contract performance.

The project involved:
• Creating the Epics hypothesis and Lean business case to present to the OCIO Intake Review Board for approval as a prioritized enterprise project
• Building a four-tiered priority system to determine the adverse impact of services disruption on the company or customer brand—priority tier one service being running the SOC, security tools and firewall administration, intrusion prevention/detection systems (IDS/IPS), and priority tier four being performing security awareness, training, or system patching
• Developing the template to conduct and report the results of cyber reviews to the BoD ROC
• Using ServiceNow tickets, searching for contracts in Oracle Fusion, and MS Dynamic PM databases and the CRM to flag PM status updates and identify anomalies
• Creating a list of tier 1-4 discovered contracted cyber services to create ready-accessible past-performance narratives for future proposal efforts
• Training PMs

I managed Port Everglades MOU support team service levels to maintain a $40 million security operations center (SOC). It involved an intelligent video surveillance system with 300 cameras connected by a separate campus fiber network fully monitored by Intrusion Protection/Detection System (IDS/IPS). Motorola Moto Mesh cameras and self-forming wireless network were integrated on campus, at each cruise line berthing station (as well as shipboard wireless), the harbormaster, and the port police vehicle fleet. I also built an alternate SOC at the emergency operations center (EOC) campus with cloud security and access to SaaS seaport applications, networks, and environments.