Richard Brooks MBCI, CISSP-ISSEP, CEH-ECSA
Details
Cyber Security, DoD Accreditations, Continuity of Operations/Disaster Recovery
Self-Taught
1985 : 2018
MultiDisciplinary - Self-Taught
Electronics, Communication, IT, Security Engineering, Architecture, Design, Hydraulics, Pneumatics
School of Life
1974 : 2015
divine child
1971 : 1974
Lockheed Martin
Information Assurance Engineer
I am currently working with PM Aircraft Survivability Equipment (PM-ASE) Program Office. Serving as Information System Security Manager (ISSM), developing processes and procedures for “Assess Only” requirements under DoD RMF as well as Cyber security requirements of Programs of Record in compliance with DoD Cybersecurity for Test and Evaluation and DOT&E/ASALT. I also provide support for US Army Base Expeditionary Tactical Surveillance System - Combined (BETSS-C), Integrated Base Defense (IBD) programs and other Force Protection programs, providing information security expertise as well as architecture and engineering support to enhance force protection capabilities utilizing current Off-the-Shelf technology. I work with Rapid Equipping Force (REF) to provide security expertise in their mission of rapidly fielding advanced warfighter protection systems. I occasionally serve on the Redstone ACA team (Army validations) and Cloud, Cyber Security, and Data Sciences Service Line out of Virginia Beach (Navy Validations) validating systems for accreditation.
2017 :
SAIC
Information System Security Manager (ISSM)
I provide security architecture and engineering expertise and accreditation support to DoD Program Offices. My responsibilities include all aspects of security architecture / engineering and certification / accreditation such as personnel, physical, emanations, communications, processing, hardware and, software as it relates to the maintenance of an overall security posture.
I interpret and advise Command, Project Managers and subordinates relative to new or revised policies, procedures, methods and techniques and work with Program Managers on unique warfighter requirements to develop realistic security profiles that protect the systems to the extent practical while meeting the mission requirements.
I conduct security assessments of planned and installed information systems to identify vulnerabilities, risks, and protection measures needed. I develop and enforce policies and procedures to assure that all projects and systems meet DoD and other federal guidelines. I identify, analyze and report attempts to gain unauthorized access, system events and failures or vulnerabilities which could lead to unauthorized disclosures. I review and develop DIACAP certification and accreditation packages, artifacts and assessment reports for DoD component organizations including US Army, Missile Defense Agency and others. I have conducted validations and Pre-validations for Army ACA teams and Navy Validators, utilizing ACAS, eEye Retina, and SCC SCAP, as well as other custom tools and manual DISA STIGs.
I work with Architecture and Engineering teams in the earliest stages of project planning to ensure that security is designed-in from the ground up. I assist in requirements gathering, design, planning, and infrastructure documentation, ensuring effective and cohesive security measures and a coordinated security training programs are implemented.
2006 :
SAIC
Information Security Engineer
I served as the District IASO exercising overall responsibility for managing information system security and vulnerability assessment including strategic and workforce planning, policy and standards development, auditing, and information security management. I was tasked with coordinating indoctrination of new users in security procedures and regulations, monitoring system and facility access and identifying system vulnerabilities and threats.
I worked with COE Lakes and Rivers Project Managers, the DAA, users and certifying authorities to prepare required reports, maintain and update system documentation and security policies and direct investigation into incidents, potential vulnerabilities and risks.
I was responsible for development and maintenance of SSAA and other DITSCAP accreditation documentation for USACE networks and transitioning USACE from DITSCAP to the DIACAP process.
I provided IM supervisory services in Mississippi Emergency Field Office in support of Task Force Hope following the Katrina/Rita hurricane disaster. As the Team Leader, planed work to be accomplished by contractor personnel, set priorities and prepared schedules for completing work. I worked with heads of other units/organizations to negotiate, decide on, or coordinate work-related changes affecting them.
I worked with the Pittsburgh Federal Executive Board, FEMA and other supporting agencies in development, training and execution of Steadfast Response : 2006 COOP Tabletop Exercise as a member of the Exercise Development and Communications subcommittees.
During my short time with the US Army Corps of Engineers, I received several commendations, including a 3-Star coin, several cash awards and won Silver Medalist Federal Executive Board Excellence in Government Award.
2005 : 2006
US Army Corps of Engineers
Information Assurance Security Officer (IASO)
As a community development project, I was tasked with planning, constructing and organizing the Roi-Namur Television Cooperative, a non-profit community organization designed to provide satellite television to a small community of approximately 200 people. With a very small budgeted of $30,000 and the task of recruitment and direction of an all-volunteer force, my team accomplished all research, development and implementation of a Satellite earth station. This involved fundraising, working technical issues with local RF engineers and major satellite provider satellite engineers at Network Operation Centers, and reaching out to service providers to obtain service free or at reduced costs.
This project was the first of its kind in the Marshall Islands and was featured in an eight page story in SatFacts magazine, October 1996. Due to our unique location, outside or at the fringe of most satellite footprints, we were challenged to implemented creative, ground breaking methods to overcome unique obstacles such as use of RF absorbing materials to reduce noise and development of a Thermal Electric Cooling unit to increase LNB signal gain.
1996 : 2003
Roi-Namur Television
General Manager / Chief Engineer
Skills
Accreditation, Army, Business Continuity, C&A, CCR 25-200, CDMO, Certificate of Networthiness, CISSP, Common Criteria, Compliance, CompTIA Security+, Computer Security, Cross Domain, DCID 6/3, DIACAP, DISA Gold Disk, Disaster Recovery, DITSCAP, Documentation, DoD, FIPS, FISMA, Flying Squirrel, Incident Response, Information Assurance, Information Security, Information Security Management, Information Security Policy, Information Technology, Integration, NIST, Penetration Testing, Policy, Requirements Analysis, Retina, Security, Security+, Security Architecture Design, Security Audits, Security Clearance, Security Engineering, Security Policy, Software Documentation, SSCP, STAT, Testing, Vulnerability, Vulnerability Assessment, Vulnerability Management, Vulnerability Scanning
About
MBCI - Member Business Continuity Institute
CISSP/ISSEP - Certified IS Security Professional / IS Security Engineering Professional
CEH - Certified Ethical Hacker, EC Council
CHS III - Certified in Homeland Security Level III, ABCHS
FEMA PDS - Professional Development Series, FEMA
Over 30 years experience in Information Technology
Over 15 years experience in Information Assurance, Information Security and Certification and Accreditation.
Over 10 years experience in Continuity of Operations, Disaster Recovery and Emergency Operations
Over 10 years experience in Weapons Systems, Fire Control Systems and Submarine operations.
TS clearance (Previous TS-SIOP/SBI)
IAT-III, IAM-III and IASAE-III certified IAW DoD Directive 8570.01
US Navy Submarine Qualified Vietnam / Cord War era Vet
Specialties: Security Architecture and Engineering, C&A using DIARMF, DIACAP, DITSCAP, NIACAP, NIST, DCID 6/3, ICD-503. Closed Restricted Networks (CRN), Certificates of Networthiness (CoN), FISMA, APMS, CCR 25-200, TEMPEST
Profile Photo
