Disclaimer: This information was obtained from publicly available sources online and is believed to be accurate at the time of publication. Valimates collects this information with proprietary technology and cannot guarantee the accuracy or completeness of the data. The purpose of the data is to inform the reader about the expertise of the individual and should not be used for any other purpose. Valimates does not have any affiliation with the individual.

Payette Adrienne
Payette Adrienne Senior Information Security Consultant at NTT DATA

Payette Adrienne has over 19 years of experience providing technical services to DoD projects, with a specialization in Information Assurance. They have a strong expertise in areas such as Anti-Tamper (AT) and Certification and Accreditation (C&A) of DoD systems, as well as test report analysis, proposal and report writing, and Data and Database Management. Payette is knowledgeable in C&A policies, processes, and package development, as well as Information Assurance and Configuration Management best practices. They have worked for reputable companies such as NTT DATA, NETE, Blue Canopy Group, LLC, Creative Computing Solutions, inc (CCSi), and The Goal, where they held positions as a Senior Information Security Consultant, Principal Consultant, and Senior Security Consultant. Payette's educational background includes a B.A. from James Madison University in English/Secondary Education. They are a highly skilled professional with a proven track record in the field of Information Security.

More about this expert

Full name
Payette Adrienne
Location
Bealeton, Virginia, United States
Title
Senior Information Security Consultant
Company
NTT DATA (since 2020)
Industry
IT Services and IT Consulting
LinkedIn Connections
221
Summary
Over 19 years of experience in providing technical services to DoD projects, including 7 years of specialized experience in Information Assurance. Areas of expertise include Anti-Tamper (AT) and Certification and Accreditation (C&A) of DoD systems, test report analysis, proposal and report writing, Data and Database Management, Configuration Management, Security, Logistics, and Safety. Products include System Security Authorization Agreements (SSAAs), DoD Information Assurance C&A Process (DIACAP) Packages, Information Assurance Strategies, Program Protection/AT plans and other security-related technical and programmatic documentation to support Command, Control, Communications, Computers and Intelligence (C4I) system, network and facility accreditation efforts. Experience includes software and system testing and analysis of test results for recommendations. Specialties: - Knowledgeable of C&A policies, processes and package development - Knowledgeable of CMM/CMMI and ISO 9000:9001 standards and process improvement practices - Development of test plans, procedures, and documentation of test results - Knowledgeable of Information Assurance best practices, defense-in-depth, and IV&V test result analysis - Knowledgeable of Configuration Management best practices, tools, and documentation - Familiar with Anti-Tamper policies and guidance
Skills
DIACAP Security

Education

Global Knowledge Training Center
Attended in 2010 - 2010
James Madison University
B.A.
Attended in 1982 - 1986
Field of study: English/Secondary Education

Positions

NTT DATA
Washington, District of Columbia, United States · Remote
Senior Information Security Consultant
Apr 2020 - Present

Cybersecurity Team Lead for Cloud Security Professionals supporting Public Sector, Centers for Medicare and Medicaid Services (CMS)
NETE
McLean, VA
Principal Consultant
May 2017 - Jun 2023

As a Senior Security Analyst, support Centers for Medicaid and Medicare (CMS), Office of Communications (OC):
• Work with a wide variety of technologies, staying well versed in the current state of information security, interpret the requirements of relevant governing bodies (NIST, OMB, GAO, etc.) and apply the contents of these requirements to assess the state of systems and applications at various stages in the development life cycle.
• Perform Risk Management for a federal client including Accreditation and Authorization (A&A), Federal Information System Management Act (FISMA) self-assessments, network scans, and penetration testing.
• Interface with federal employees and contractors in order to perform security assessment activities as well as to present vulnerabilities to the client.
• Review security related documentation (System Security Plans, Configuration Management Plans, etc.).
• Organize and facilitate meetings.
• Assist with system and application accreditation activities.
• Conduct testing and analysis of test results.
• Track the status of test activities.
• Track the status of Plans of Action and Milestones (POAMs).
• Compile and write status reports.


Blue Canopy Group, LLC
Reston, VA
Senior Security Consultant
Sep 2016 - May 2017

• As a Senior Security/CCA Engineer work with a wide variety of technologies, well versed in the current state of information security, interpret the requirements of relevant governing bodies (NIST, OMB, GAO, etc.) and apply the contents of these requirements to assess the state of systems and applications at various stages in the development life cycle.
• Perform Risk Managements for a federal client including Accreditation and Authorization (A&A), Federal Information System Management Act (FISMA) self-assessments, network scans, and penetration testing.
• Interface with federal employees and contractors in order to perform security assessment activities as well as to present vulnerabilities to the client.
• Review security related documentation (System Security Plans, Configuration Management Plans, etc.).
• Assist other Engineers to quickly and efficiently complete security control assessments.
• Write and edit Continuous Control Assessment reports detailing the system and application test results and recommendations for fixes/mitigations to findings.

Creative Computing Solutions, inc (CCSi)
Rockville, MD
Information Security Analyst
Apr 2014 - Sep 2016

• As the IA Team Lead for CMS OC, interface daily with ISSOs and system security team members to determine priorities and provide assistance with preparation and submission of the accreditation packages.
• Manage an IA Team supporting the CMS OC ISSOs and assist team members with access requirements, tasking and resources.
• Conduct risk assessments for the CMS OC systems using the NIST Risk Management Framework, which is built into the CFACTS online database system, the authoritative source for accreditation packages.
• Host and facilitate Weekly CMS OC Security Meetings on behalf of the ISSOs
• Instruct system owners and ISSOs on system accreditation requirements and CMS Accreditation & Authorization processes.
• For the CMS OC Amazon Web Services platform, attend daily operations and security meetings and provide security guidance as needed. Assist ISSOs with required Security Control Assessment documentation, CFACTS control implementation details, and project plans.
• Served as the liaison between the Triple-I IA Team and CMS OC Management for tasking, project management, open communication and effective customer relations.
• Prepare and edit System Security Plan packages for CMS OC systems prior to the Security Control Assessments (SCAs) and annually for the annual attestation requirements.
• Tracked and managed the code scan analysis and penetration testing conducted by the Triple-I tester for CMS OC systems.
• Experience with using Cisco AnyConnect client VPN products, including installing and configuring for use.

The Goal
Sr. Information Security Analyst
2013 - 2014