Brenda Decow

In Training

• Training using NIST RMF 800-53 and CSF 2.0

NIST RMF

learning how to:

• Execute all phases of the NIST RMF lifecycle, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop and maintained RMF documentation such as the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
• Tailor NIST SP 800‑53 Rev. 4/5 control baselines based on FIPS 199 system categorization and organizational risk posture.
• Conduct security control assessments to evaluate control effectiveness and identify deficiencies, risks, and remediation strategies.
• Support system owners and ISSOs through the ATO process, ensuring compliance with federal security requirements.
• Performed continuous monitoring activities, including vulnerability scanning, risk analysis, and control updates.

CSF 2.0

learning how to:

• Apply the NIST CSF 2.0 framework to assess organizational cybersecurity posture across all six functions: Govern, Identify, Protect, Detect, Respond, and Recover.
• Develop and maintain cybersecurity governance artifacts, including policies, standards, risk registers, and strategic roadmaps aligned with CSF 2.0.
• Conduct gap assessments and maturity evaluations using CSF 2.0 categories and subcategories to identify risks and prioritize remediation.
• Collaborate with cross‑functional teams to implement cybersecurity controls and processes mapped to CSF 2.0 outcomes.
• Support enterprise risk management by integrating CSF 2.0 with organizational risk methodologies and compliance requirements.
• Lead or contribute to cybersecurity program improvements, including incident response planning, asset management, vulnerability management, and business continuity alignment.
• Monitor cybersecurity performance using CSF 2.0‑aligned metrics, dashboards, and continuous improvement cycles.

Once done in training I will be able to:

• Conduct risk assessments to identify vulnerabilities in cybersecurity frameworks.
• Collaborate with cross-functional teams to develop and implement security protocols.
• Analyze security incidents to enhance response strategies and prevent future threats.
• Review compliance with industry standards and regulations to ensure organizational adherence.

Worked in various roles including Customer Service Manager, Department Manager, Automotive Service Writer, Cashier, and most recently, Online Pickup and Delivery Associate.

• Curated personalized shopping experiences for diverse customer preferences and needs.
• Coordinated inventory management to ensure product availability and timely order fulfillment.
• Streamlined online order processing, enhancing efficiency in customer service delivery.
• Implemented best practices for utilizing e-commerce platforms to maximize user satisfaction.
• Trained and supervised up to 25 employees in customer service and company policies and procedures.
• Merchandised products, processed customer orders and returns, operated the cash register, audited register tills, and resolved customer complaints.
• Assisted customers with Point of Sale computer and Scan and Go issues.
• Received several “Years of Tenure” awards for long-term work history.

• Operated communication systems to ensure efficient transmission of critical information.
• Monitored radio communications, ensuring clarity and accuracy in message delivery.
• Coordinated responses to emergency situations, maintaining calm and order during high-pressure scenarios.
• Managed incoming and outgoing messages, prioritizing urgent communications effectively.

• Supported individualized education programs by implementing tailored instructional strategies and accommodations.
• Collaborated with teachers to develop engaging lesson plans that address diverse learning needs.
• Monitored student progress, providing feedback to educators and parents on performance and behavior.
• Assisted in behavioral management, employing positive reinforcement techniques to promote a conducive learning environment.