Dwayne SherlandHomeLoginContact
Dwayne Sherland
 About Me  Work History  Qualifications  Download Resume's  Education  About My Family  Awards  
     IS Security IT Manager Projects Consulting
Jerry, Bing, Maria, Me
Jan 1, 2005
James Dwayne Sherland Work History


From

To

Name of Company

 

Brief Description



Work Examples
  Kid Care
  Goshen
  E-Business
  Generic Web
  Agreement
  Time Line  
  Contractor  
  Articles  
  Process  

8/2006

Present

CDC Centers for Disease Control & Prevention
Click Arrow for Overview



IS Security Industry

1/2002

8/2006

SureLAN

IT - Travel Industry

9/1998

1/2002

SITA

IT - Travel Industry

9/1997

9/1998

Equant

IT - Travel Industry

9/1996

9/1997

Pacific Rim Networking

Self Employed

8/1993

9/1996

NPMOC

Weather Center

7 /1990

8 /1993

U.S.S. Worden CG - 18

Ship’s Crew

9/1989

7/1990

Combat Systems Training Schools Command

School

10/1986

9/1989

Fleet Combat Training Center Atlantic

Equipment Maintenance

7/1985

10/1986

U.S.N.S. Chauvenet (TAGS-29)

Ship’s Crew

1/1984

7/1985

Combat Systems Training Schools Command

School

9/1983

1/1984

USN Recruit Training Center

Boot Camp

6/1983

8/1983

Amtran

Bus Manufacturer

  

3/1981

5/1983

Aeromotor Motor works

Windmills

12/1980

2/1981

Conway Manufacturing Inc.

Wiring Harnesses

9/1978

11/1979

Virco

Furniture Manufacturer

7/1977

8/1978

Serendipity Oil Company

Drilling Company

9/1976

3/1977

Harps IGA

Grocery Store

5/1976

8/1976

Austin Road and Bridge Company

Road Construction

7/1974

4/1976

Ranch House Restaurant

Restaurant

5/1972

8 1972

Earl Hostetler Landscaping

Mowing Grass

CDC

Back to top      

08/06-Present

C&A Security Analyst

 

 

1600 Clifton Rd.

 

 

Atlanta, Georgia 30333

 

 

 

 

 

A day in the life of a C&A Analyst

  • Create Certification and Accreditation documentation with adherence to OMB, HHS, NIST, FIPS, CDC, and OCISO guidance for 34 current and eventually 200 systems for the Coordinating Center for Infectious Diseases.
  • Calculate risk for 34 current and eventually 200 systems. Determining risk level from 12 different threat vectors specific to the system. Other parameters such as system environment, development criteria, technology involved, version and patch levels, all play a part in what risk is assigned.
  • Meet with system developers to discuss a variety of application development issues such as: system platform issues, technology used, development methods, change management processes, and user access levels.
  • Edit client provided documentation. I also interview system technical and business stewards for detail and specific clarification regarding system technical description, architecture, function, administration and development practices.
  • Interface as liaison between OCISO and CCID security team managers and leadership to coordinate security policies, goals and methods between organizations.
  • Evaluate information systems security vulnerabilities and control measures for hardware and a variety of operating systems such as Windows Linux, AIX, and Solaris.
  • Develop specific test procedures for evaluating the proficient and accurate implementation of security controls outlined in NIST SP 800-53 revision 1.
  • Engage in regular dialog with CCID ISSO for input and team collaboration. Dynamics include differences between OCISO and CCID, individual system security variables, status reporting methodologies
  • Engage in regular dialog with CCID security stewards for clarification of C&A policies, procedures, changes, and individual system documentation.
  • Participate in dialog to defend and or justify OCISO system C&A policies. Proactively advocate the necessity and long term value of the C&A procedure.
  • Contribute to the security strategy of individual system security control implementation.
  • Research all pertinent resources and references to validate, instruct, and promulgate C&A policies, procedures, changes, and individual system documentation.
  • Interface with project managers for, project progress, schedule requirements, and clarification for OCISO and CCID security policies and procedures.
  • Critique security controls, policy and procedures to evaluate the accuracy and applicability with individual, as well as campus wide system security implementation plans.
  • Quickly comprehend complex IT systems and investigate the system security plan, security controls implementation, and how the system is impacted by the campus wide environment.
  • Learning about and staying current of new technologies / security ramifications with the latest threats and techniques used to compromise CDC IT systems.
  • Monitor the latest security developments, understand and utilize security advisories from various sources and manufacturers security advisories.
  • Review existing and proposed systems and applications to ensure that they are aligned with OCISO / CCID security objectives while creating minimal or acceptable risk to information systems, data or documents.
  • Interact with CCID ISSO to actively contribute to the development and maintenance of the overall Information Risk Management program.
  • Participate in the weekly CCID Security Team meetings, to develop status reports and process documentation.
  • Advise business, security and technical stewards in all aspects of Information and Systems security, risk management, and information policy and practices.
  • Act as the OCISO security policy liaison between ITSO department staff about the risk and control measures associated with information systems technologies.
  • Perform System Security Assessment, Risk Analysis, & Remediation Solutions for Information Technology in the CDC environment as needed; reports, recommends and verifies remediation programs as required.
  • Evaluate OCISO and CCID security technologies, processes and methodologies and makes recommendations wherever applicable.
  • Maintain project status reporting responsibilities for 34 current and over 200 eventual assigned Security Certification and Accreditation Projects.
  • Participate in related Business Contingency Plan testing and disaster recovery training meetings with business, security and technical system stewards.
  • Maintain OMB/HHS/NIST/OCISO Certification and Accreditation documentation for 34 current and eventually 200 systems for the Coordinating Center for Infectious Diseases.
  • Understand, identify, translate and interpret OMB/HHS/NIST/OCISO security requirements to recognize implementation and deployment effectiveness to defend against security vulnerabilities and attacks.
  • Monitor security policies, processes and standards that support OCISO and CCID security goals. And report threats assessment and safeguard recommendations for any non compliance or emerging vulnerability.
  • Identify, and estimate security controls implementation costs
  • Sure LAN

    Back to top      

    01/02-08/06

    Self Owned IT Business

     

     

    1482 Ashlyn Court

     

     

    Austell, Georgia 30168

     

     

     

     

     

    Self owned information technology company. Atlanta metro area market place targeting small to medium size businesses without or with minimal it staffing budget. Utilizing creative problem solving and innovative technology solutions to business needs. PC maintenance and repair to LAN and Wan implementation and troubleshooting. Web development and remote access and wireless technologies provider.

     

     

     

    Societe Internacionale Telecomunicate Aeronautic (SITA)

    Back to top      

    9/1998-1/2002

    Service Account Mgr / Business Solutions Architect

     

     

    3100 Cumberland Boulevard
    Suite 200

     

     

    Atlanta, Georgia 30339

     

     

    Telephone: 770 850 4500
    Fax: 770 612 2265

     

     

     

     

     

    Business Solution Architect

    I provided presales support for sales staff during customer presentations. I was also the third tier support for project management and program rollout initiatives. I created Airline in a Box Product Solution Methodology. Held training for sales and support staff for desktop technology trends, methods, and market environment factors. I was serving in a dual role in a matrix management setting supporting Marketing and Technical sales support.

    Service Account Manager Northwest Airlines

    I managed multi-million dollar maintenance contract for Northwest airlines. Computer terminal, peripheral, and computer support in 33 different countries. The contract covered primarily Asia and the Pacific Southeast. I was responsible for quarterly discrepancies and hot list resolutions reporting. Developed cross platform reporting method for executive level access to contract trouble areas.

     

     

     

    Equant

    Back to top      

    9/1997-9/1998

    Project Manager (United Airlines)

     

     

    3100 Cumberland Boulevard
    Suite 200

     

     

    Atlanta, Georgia 30339

     

     

    Telephone: 770 850 4500
    Fax: 770 612 2265

     

     

     

     

     

    I was the onsite project manager for a United Airlines LAN airport upgrade program implemented in 60 countries. I started in the Honolulu International airport and found a number of ways to save money and deliver the project on time. The success of the first project allowed me to continue the program in 13 other countries. The implementations included circuit upgrades, terminal to PC upgrades and switching and routing configuration and installation components. I also had the facility and equipment disposal responsibilities. The scope of the Honolulu project was well over 2 million dollars not including the .5 million dollar fiber optic backbone installation at the airport.

     

     

     

    Pacific Rim Networking

    Back to top      

    9/1996-9/1997

    Self Owned

     

     

    98-1434 Kaahumanu St #42D

     

     

    Pearl City, HI 96782

     

     

     

     

     

    I started this business immediately after leaving the United States Navy. I marketed downtown Honolulu businesses with PC and LAN maintenance and implementation. I bid on a number of government and school projects. I contracted a stock brokerage firm requiring real time stock trading technology I believe one of the first such “Day Trading” set ups in the islands at the time.

     

     

     

    United States Navy

    Back to top      

    9/1983-8/1996

    NPMOC

     

    8/1993-9/1996

    LAN/WAN Manager (Data Systems Chief E7)

     

     

    Pearl Harbor, Hawaii

     

     

     

     

     

    I was the system administrator for 2 networks. I Planned implemented and administered an upgrade project for 2 classified LANs, and 2 unclassified LANs. I also had Pacific wide site reporting responsibilities for Naval Meteorology and Oceanography community global WAN. There were100 plus user trouble desk management as well as consultation with Pacific Wide subordinate networks. I was responsible for a large degree of day to day operational reliability and process improvement success. I influence large $100,000 plus computer asset budget. I also administered 2 CCMail systems, bulletin board, Web Page and various product dissemination concerns. I had an impeccable Customer Service Record.

     

     

     

    USS Worden CG-18

    Back to top      

    7/1990-8/1993

    Work Center Supervisor (E6)

     

     

    Pearl Harbor, Hawaii

     

     

     

     

     

    I was the Work Center Supervisor for all of the display equipment in the command center. I was responsible for all display consoles, automated status boards (TV’s), radar and video switching equipment and the training beacon video processor. The work load averaged 14 hours a day and I was away from home for 2 and a half years of the three years U was onboard. I received numerous awards and citations for service in Desert Shield and Desert Storm

     

     

     

    Combat Systems Training Schools Command

    Back to top      

    9/1989 - 7/1990

    Technical Student E5 (NEC 1684)

     

     

    Mare Island, California

     

     

     

     

     

    I trained for shipboard electronics maintenance and repair (CG/CDS Display equipment Maintenance "C" CDP:169A A-150-0262). I earned a Naval Education Certification (NEC 1684). The school was 34 weeks long and there were no awards given for class standing.

     

     

     

    Fleet Combat Training Center

    Back to top      

    10/1986 - 9/1989

    Technical Maintenance Petty Officer (E4)

     

     

    Dam Neck, Virginia

     

     

     

     

     

    I was stationed at this school command that had ship board mock-ups of several different configurations. There was a huge amount of maintenance and repair on nearly every system the US Navy uses on board a Navy Ship. The repair and maintenance was done on midi-frame and main-frame computer systems, display and switching equipment as well as radar and unique one-of-a-kind digital and analog converter switches only used at this command.

     

     

     

    USNS Chauvenet TAGS-29

    Back to top      

    7/1985 - 10/1986

    Survey Control Watch Officer

     

     

    Indonesian Archipelago

     

     

     

     

     

    I was a crew member on this Oceanographic survey vessel mapping the ocean floor in the Makassar Straits. The ship used LORAN, GPS (First ship in the USN to use this), Satellite, Radios, 2 DEC Main frame computer, and an array of survey plotting and mapping peripherals. I was responsible for the maintenance and repair of all the computer components onboard.

     

     

     

    Combat Systems Training Center Command

    Back to top      

    1/1984 - 7/1985

    Technical Student E4 (NEC 1672)

     

     

    Mare Island, California

     

     

     

     

     

    I trained for shipboard electronics maintenance and repair (DD963 Computer/Peripheral Maintenance "C" CDP:4349 A-150-0109). I earned a Naval Education Certification (NEC 1672) The school was 30 weeks long and there were no awards given for class standing.

     

     

     

    United States Navy Recruit Center

    Back to top      

    9/1983 - 1/1984

    Recruit (E1)

     

     

    San Diego, California

     

     

     

     

     

    I joined the United States Navy in the delayed entry program and started my service at the recruit center in San Diego. Boot camp is … boot camp.

     

     

     

    Amtran

    Back to top      

    6/1983 - 8/1983

    Painter

     

     

    Conway, Arkansas

     

     

     

     

     

    I worked on manufacturing school buses. I was in the paint department. I either painted the rear bumpers black or I was spraying inside the bus the light green color. I also sanded and grinded after the riveters. It was an assembly line job and the work was very difficult.

     

     

     

    Aeromotor

    Back to top      

    3/1981 - 5/1983

    Painter

     

     

    Conway, Arkansas

     

     

     

     

     

    I learned how to operate a powder coating machine. I ran the machine for production parts at the plant. There was also a spray booth that I used for parts that did not have enough iron in them. We manufactured underwater water pumps and windmills for electrical power generation.

     

     

     

    Conway Manufacturing Inc.

    Back to top      

    12/1980 - 2/1981

    Shipping Clerk

     

     

    Conway, Arkansas

     

     

     

     

     

    I was the shipping and stocking clerk for this wiring harness manufacturing plant. I also drove a large tandem truck once a week to deliver the parts we made to the parent company Polyvend. They made vending machines.

     

     

     

    VIRCO

    Back to top      

    9 /1978 - 11/1979

    Fork Lift Operator

     

     

    Conway, Arkansas

     

     

     

     

     

    I worked here to put myself through college. It was an office furniture manufacturing facility. They made the 8 foot folding tables and institutional plastic and steel chairs. I started off on the assembly line for tables and transferred to driving a fork lift.

     

     

     

    Austin Road & Bridge Co.

    Back to top      

    7/1977 - 8/1978

    Truck Driver

     

     

    Houston, Texas

     

     

     

     

     

    This was a summer job with my uncle in Houston Texas. I was using a shovel for most of the summer but graduated to driving a truck toward the end of the summer.

     

     

     

    Harps IGA

    Back to top      

    9/1976 - 3/1977

    Grocery Stocker / Bagger

     

     

    Harrison, Arkansas

     

     

     

     

     

    I bagged groceries and stocked shelves part time during the end of summer.

     

     

     

    Serendipity Oil Company

    Back to top      

    5/1976 - 8/1976

    Oil Feild Roughneck

     

     

    Palestine, Texas

     

     

     

     

     

    In between school terms I would work in the oil field as a rough neck. The work was hard and dangerous but paid very well. I made enough in the summer to have money for my school year.

     

     

     

    Ranch House Restaurant

    Back to top      

    7/1974 - 4/1976

    Dishwasher

     

     

    Harrison, Arkansas

     

     

     

     

     

    I washed dishes and bussed tables during the graveyard shift on Friday and Saturday night.

     

     

     

    Earl Hostetler Landscaping

    Back to top      

    5/1972 - 8/1972

    Grass Mower

     

     

    South Bend, Indiana

     

     

     

     

     

    I was hired by my uncle to mow the grass at a local cemetery. As soon as we finished the job we had to start over. I was very young. I think I earned 125 dollars all summer.

    Some of the specific dates that are older may need to be corroborated if 100% accuracy is required.





    JDS Logo     Copyright© James Dwayne Sherland 2005. All rights reserved.